I wonder how easy it would be to prove that one of the users whose data was leaked was a citizen of the EU or the state of California, which have pretty strong

I wonder how easy it would be to prove that one of the users whose data was leaked was a citizen of the EU or the state of California, which have pretty strong data privacy laws if I'm not mistaken. I smell a lawsuit.