resident facebook expert following the story. i've lost track of all of the apologies that facebook has had to issue lately. so if this incident occurred back in september, why are we only finding out about it now? >> that's a very good question, alex. and that's what we asked them yesterday. they told us that apparently it took them almost two months, actually almost three months, to figure out the nature of this breach and what it happened, and also to figure out a way to tell affected users, almost 6.8 million users whose photos were exposed, to figure out a way to tell them. there is new law in europe as of may, gdpr, which requires companies like facebook, after they discover a breach, to report it to authorities in europe within 72 hours. so clearly, this is not within that 72-hour time frame. but facebook argues that they were trying to figure out, well, was it actually a breach or not? as a result, as of what you