The scope of GDPR is clearly including businesses operating from the US, but has any company registered only in the US ever been fined by EU?