Data breaches are a serious problem for all companies and they often dont think through just how valuable the data they have is and how easy it could be for cybercriminals to hack it. If cybersecurity isnt your speciality, people mostly have no idea how serious the consequences of lax data security can be. GDPR has started to get people to think a little more. Companies that neglect to address cybersecurity post GDPR are gambling with some pretty high stakes because the penalties under GDPR are severe. They have the potential to literally put a company out of business. Hugh Chambers, Cyber Security Advisor, Uncloak.
https://medium.com/@Uncloak.io/gdpr-will-cost-unprepared-companies-big-money-f9bcbd194dcc