Google+ shutting down after not disclosing major security flaw.
Reason for not disclosing? They only kept logs for 2 weeks...
This could may have some nasty GDPR consequences: leaking personal identifiable data, *and* not adequately logging access to those personal data.
This could be a 4% of global annual revenue type penalty (so about 4.5B in Google's case)
https://www.extremetech.com/internet/278352-google-will-shut-down-in-2019-after-exposing-user-data