Every time we notified anyone about a potential illegal breach of gdpr that could get us fined or sued, admin pretended they had never been informed because the changes would take too long and collide with their plans to “revamp everything, reinvent the platform, and rebrand”.

I should have whistleblown them myself if it were not for the fact that doing so would probably get some previous employees fired rather than hurt the company.