Just a reminder: shit like this doesn't easily happen where a regulation like GDPR is in effect.