Not surprisingly, the leaky data sieve that is Facebook, had its trove of personal data accessed from Russia and other countries (which likely includes the U.S.?):

The now infamous Facebook data set on tens of millions of Americans gathered by a Cambridge University scientist for a firm that went on to worked for Donald Trump’s 2016 campaign was accessed from Russia, a British member of parliament tells CNN.

Source: Cambridge Analytica’s Facebook data was accessed from Russia, MP says
As noted in the story, access appears to have been made from many countries. The headline focuses on Russia because that’s a hot bottom media meme right now (lots of accusations without supporting evidence).
The bigger issue remains that Facebook is a global surveillance network that tracks everyone’s online activities and has been buying offline consumer purchasing data to integrate into their own database. Facebook, historically, gave third parties access to this data – including allowing apps to gather data on friends of friends who never gave permission. Facebook has leaked this data like a sieve leaks water. Everything we’ve ever done on FB should be assumed as having been collected by numerous third parties.