GDPR: what if my network is breached?