If a crypto provider reports a data breach, you as a customer in Germany have two rights that apply immediately: under Art. 15 GDPR you may find out which data is stored about you, and under Art. 82 GDPR you can claim compensation. Germany's Federal Court of Justice (BGH) has ruled that the mere loss of control over your own data is enough for this, and it expressly approved compensation in the region of €100 for that case. More is available if you can prove concrete damage.
The question is very practical right now. At the end of October two services from the crypto industry confirmed data breaches, and both involve information that is more sensitive for crypto investors than an email address in an online shop. This guide explains when a data breach gives rise to a claim, how to assert it and why the most important step after a breach concerns your coins, and only then the lawyer.
Data breaches at Wagyu and Chainalysis: which crypto data leaked at the end of October
The first case concerns the swap service Wagyu. A swap service exchanges one coin for another without you creating an account with identity verification: you send, say,
English (US)