A few years ago I wrote a blog for the company I work for, where I mulled the idea that the GDPR (General Data Protection Regulations) could be used by threat actors as a weapon to cause financial dam...