I really hope they now have to pay that 4% ransom due to violation of the GDPR .. for each stolen account of course ;-)