Props to the EU for keeping data giants accountable. It is a shame the data protection authorities only have resources to process so many companies, unfortunately, many get away with much more harm to user privacy.
2. Failure to comply with the obligation to provide information
3. Failure to ensure the security of personal data
4. Failure to carry out a data protection impact assessment
While not a direct security breach investigation, these have high impact on user data. (edit: formatting)