Hacker threatens ransomware victims for GDPR compliance issues