Bad headline by The Register, the problem is not GDPR as the headline might try to convince you, the issue is identity validation and lack of security controls.

Bad headline by The Register, the problem is not GDPR as the headline might try to convince you, the issue is identity validation and lack of security controls. The attach described is similar to "password reset", which gives an adversary access to everything and companies that don't have strong security in place, or users with weak passwords are likely subject to exploitation.