So you're a legal expert now too? You characterization of what happened as "mass exfiltration" is just that - your personal opinion.
No, OP documents that in painful detail.
https://gdpr-info.eu/art-4-gdpr/ section 12.
Under the GDPR this was a breach, pure and simple.
No, OP documents that in painful detail.
https://gdpr-info.eu/art-4-gdpr/ section 12.
Under the GDPR this was a breach, pure and simple.