I actually think the article is correct about GDPR data breaches. See my other comment about this.

https://news.ycombinator.com/item?id=18990122