“Exactis breach exposes 340m records, may compel GDPR-like regulation in US”