I'm pretty sure the GDPR requires notifying affected users in addition to notifying data protection agencies. I haven't seen any public statement about the brea

I'm pretty sure the GDPR requires notifying affected users in addition to notifying data protection agencies. I haven't seen any public statement about the breach from Facebook, yet alone received any messages from them. Interestingly my phone number seems to have been exposed but not my e-mail address. I don't recall providing my phone number to Facebook although I do recall explicitly being asked to. I do however use WhatsApp. I wonder if there's more to this.