Okay, with "any bigger US company" I thought mostly about Facebook and similar companies, of which many does continuously break GDPR rules even after many decisions and fines (simply because their business model is incompatible with privacy / data protection).

But it is still true, that nothing happened after the Schrems II judgment, and many-many companies continued to transfer personal data to providers affected by FISA.