Sure, Facebook this week reported quarterly results that blew past estimates — reflecting little impact from the Silicon Valley giant’s privacy scandal — and its stock is on track to close the week up about 4 percent.

Some analysts pointed out, though, that the Cambridge Analytica mess did not blow up till the tail end of the first quarter, and next quarter’s earnings might provide a better gauge. And in its 141-page filing with the Securities and Exchange Commission Thursday, Facebook — like all public companies — warned of risk factors, the official version of what might keep CEO Mark Zuckerberg up at night. Chief among them is the possibility of other Cambridge Analyticas.

“We anticipate that our ongoing investments in safety, security, and content review will identify additional instances of misuse of user data or other undesirable activity by third parties on our platform,” Facebook said in its 10-Q filing. It is a point that Zuckerberg made again and again during his Congressional testimony earlier this month.

Get tech news in your inbox weekday mornings. Sign up for the free Good Morning Silicon Valley newsletter.

What’s more, Facebook knows it won’t catch everything, even though the company is investigating and auditing away after revelations that political data consulting firm Cambridge Analytica accessed the information of up to 87 million Facebook users without permission.

“As a result of these efforts we anticipate that we will discover and announce additional incidents of misuse of user data or other undesirable activity by third parties,” the company said. “We may also be notified of such incidents or activity via the media or other third parties.”

So while “intense media coverage” and “negative publicity” are considered risk factors for the company, they might help uncover the next big leak or misuse of the world’s largest social network. For example, the New York Times reported this week that a bunch of fake profiles of Zuckerberg and COO Sheryl Sandberg have succeeded in cheating Facebook users out of real cash.

In addition, Facebook mentioned in its filing that “beginning on March 20, 2018,” it was hit with multiple lawsuits related to Cambridge Analytica. It added that it is facing regulatory inquiries in the United States, Europe and elsewhere that could subject it to “substantial fines and costs.”

On the subject of regulations, the General Data Protection Regulation (GDPR) in Europe — which requires stricter privacy controls — is scheduled to take effect next month and could influence the effectiveness of ad targeting and cost the company more money, Facebook said.

Related Articles Facebook vows to restrict users if U.S. election descends into chaos: Report

Kim Kardashian, Leonardo DiCaprio and other celebrities join Instagram ‘freeze’ to protest Facebook inaction

Facebook launches nationwide poll worker recruitment effort

Facebook blocks ailing man’s planned end-of-life broadcasts

Facebook to halt new political ads just before U.S. election Analysts who remain optimistic about Facebook’s prospects and maintain an outperform rating for its stock echo these concerns.

“Online advertising is becoming increasingly fraught with privacy-related concerns which is attracting significant attention from legislative bodies as well as users,” Baird analysts said in a note to investors this week.