The billion dollar question: are any of the affected users EU citizens?