Facebook parent company Meta has been fine €265 million by the Irish Data Protection Commission after a data breach involving the personal details of hundreds of million users.
Last year, the DPC launched an investigation after names, phone numbers and email addresses of hundreds of millions of Facebook users were published in an online hacking forum. The scope of the investigation, which began in April 2021, included both Facebook, Messenger and Instagram tools, the DPC said. It covered the period between 25 May 2018 and September 2019.
The Commission found that Meta had been in breach of Article 25 of the GDPR rules. Other than the €265 million "administrative fines", they also issued a formal reprimand and an order inquiring Meta to bring its processing into compliance.