Setting aside anything Russia might have gained, there was clear harm done to the reputations of US intel agencies (and US more generally), as well as minor but

Setting aside anything Russia might have gained, there was clear harm done to the reputations of US intel agencies (and US more generally), as well as minor but directly consequent limits placed on their abilities. I don't know if you can tie GDPR into all this but that would likely include "damage" to economies as well. What matters is whether the disclosure helped more than it hurt. I think the jury's out on that until either the next major terror attack or the US pardons Snowden.