I don't think there is a need to discuss where legal headquarters is. We just had a backlog of backend tasks pending. It was just a matter of time.
The site has already been reported by an affected user to the local EU data protection officer, so the legal fallout has already started.
If you still have shares in the company, sell.