They will if EU citizens report them.
Anyone who thinks GDPR applies to companies operating entirely outside the EU is deluded at best.
Basically, it covers companies with some legal entity in the EU.
For example, if you live in the UK, you should contact the Information Commissioner's Office (ICO) according to [0].
[0]: https://www.entrust.org.uk/privacy/privacy-and-data-protecti...