@f7d0478e wait. this is a global thing, the most of the countries they're in are affected. the privacy policy for Lycamobile.nl says Lyca Mobile SPRL in Belgium. this suggests... there is a *number* of DPOs they might have not informed? 

 @dad47b70 yeah, it looks like a nightmare incident. They’re a least cost provider, I doubt they have much (if any) InfoSec team