Basically, when asking to invoke your GDPR Article 18 right of restriction (or your Art17 right of erasure) make sure to explicitly ask for the list of who your data was shared with. And by “explicitly” I don’t mean rude words. Be polite people.