Quite possibly. If you are a data subject affected by this affair you can contact your local DPA.