Last week Facebook was reasonably transparent about a hack affecting tens of millions of users.
The GDPR has already called out Facebook for lack of info in its response to the breach: https://www.cnbc.com/2018/10/02/facebooks-muddy-account-brea...
Not sure why you'd pick that example.