Who should I write to when there is a data breach?

You should immediately notify the Data Protection Officer ( dpo@adventgroup.net ) and the IT Support ( support@itservices.bg ) in that correct order. 

The DPO will make a risk assessment and notify the CPDP if necessary and will contact the data subjects without undue delay.