Aren't companies under the GDPR obliged to report [1] if the got hacked/a data breach? Sounds to me as if quite a few just got hacked via social engineering...

Aren't companies under the GDPR obliged to report [1] if the got hacked/a data breach? Sounds to me as if quite a few just got hacked via social engineering... [1] https://blog.netwrix.com/2018/04/19/gdpr-rules-of-data-breach-notification-how-to-report-personal-data-loss-and-avoid-fines/ https://blog.netwrix.com/2018/04/19/gdpr-rules-of-data-breac...