Database (mysql) data is stolen, GDPR breach, Estonian data protection agency (Andmekaitse) or EU regulators fine us

CauseUnforseen code vulnerability
Impact (%)80
Probability (%)20
Response plan- Notify all affected customers
- Hire CR12 / Hackerone to detect potential breaches in security
Score1600