All organisations that process personal data of EU citizens must comply with the GDPR, even when not operating in EU soil.

Personal Data Breach Reporting Requirements Under the GDPR
What is Data Breach? A personal data breach is security incident that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or