Did Regulatory Enforcement Actions Just Lead to a Major Cyberbreach?