“Exactis breach exposes 340M records, may compel GDPR- like reg in U.S.”