It would be highly unlikely that any action would be taken at all. The issue was handled responsibly and was unintentional. Fining companies who disclose proble

It would be highly unlikely that any action would be taken at all. The issue was handled responsibly and was unintentional. Fining companies who disclose problems in this manner would just cause others to try and cover them up, which would go against the intent of the GDPR (protecting users).