[pron]

The article says:

> It suggests this leak of data has been happening since May 2018 — which is also the day when Europe’s updated privacy framework, GDPR, came into force. The regulation mandates disclosure of data breaches (which explains why you’re hearing about all these issues from Twitter)

So, at least according to the article, they did have an obligation to disclose this.

[oneepic]

Thanks for pointing that out. Maybe this is moving the goalposts, but I'm still happy they're at least disclosing the issues and following the mandated procedure, instead of trying to hide it and save face.