[pmlnr]

Yeah, but the b.com leak involved credit card data which changes everything in the eyes of regulators. Sadly this is not true for "mundane" data like phone numbers, email addresses, or even physical addresses.

[sofixa]

In regards to GDPR, personally identifiable information is the main focus.