As is, this fine probably doesn’t cover the salary of a junior security researcher for one year to discover vulnerabilities and enforce best practices that could have prevented things like this. The message seems to be don’t bother actually securing your systems if you are a European outfit.