As cyber criminals concentrate on targeted, strategic, money-making attacks, they are likely to use GDPR fines as leverage to extort money from organisations

http://www.lpportal.eu/content/editorial/articles/web-and-mobile-fraud/gdpr-fines-could-become-weapon-choice-cyber-extortion/