What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Ireland’s Data Protection Commission (DPC) fined Meta Platforms Ireland Limited €91 million after finding that it stored some Facebook users’ passwords in readable plaintext on internal systems and failed to meet GDPR security, breach-notification and record-keeping obligations. The $102 million headline figure is an approximate conversion: the Associated Press reported the fine as about $101.6 million.

What happened to Facebook users’ passwords?

In April 2019, Meta Platforms Ireland Limited (MPIL) notified Ireland’s DPC that some social-media user passwords had been inadvertently stored in plaintext on internal systems, without cryptographic protection or encryption. The DPC’s inquiry concerned the Facebook service and examined two password-logging incidents that came to MPIL’s attention in January 2019.

Plaintext means the passwords were kept in a readable form rather than protected by encryption or a cryptographic hash. That describes how the information was stored; it does not, by itself, establish that an outsider accessed or misused it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How much was the fine, and who imposed it?

The official penalty was €91 million, imposed by Ireland’s Data Protection Commission. The DPC adopted its final decision on 26 September 2024 and announced it on 27 September 2024. The Associated Press described the amount as approximately $101.6 million, which accounts for the rounded $102 million figure used in some headlines.

The legal subject of the decision was Meta Platforms Ireland Limited, not the European Commission. The DPC said other concerned supervisory authorities raised no objections to its draft decision as part of the EU/EEA cooperation process.

Which GDPR rules did Meta breach?

The DPC found infringements across four GDPR provisions. Together, they address protecting personal data and handling a breach when one occurs.

GDPR provision DPC finding
Article 5(1)(f) Failure to ensure appropriate integrity and confidentiality of personal data.
Article 32(1) Failure to use security measures appropriate to the risk.
Article 33(1) Failure to notify the DPC of a personal data breach involving the plaintext password storage.
Article 33(5) Failure to document the breaches.

The DPC issued a reprimand as well as administrative fines totalling €91 million. Deputy Commissioner Graham Doyle said that passwords should not be stored in plaintext because of the risk of abuse, adding that these passwords were particularly sensitive because they could enable access to users’ social-media accounts.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Did anyone misuse the passwords?

The DPC’s findings concerned password storage and Meta’s GDPR obligations; they do not establish that the passwords were actually abused. Meta told the Associated Press that a security review found a “subset” of Facebook users’ passwords had been “temporarily logged in a readable format.” The company said it acted to fix the error and had no evidence the passwords were abused or accessed improperly. Those statements are Meta’s account as reported by AP, rather than a finding by the DPC.

Quick Recap

Bestseller No. 2
Bestseller No. 4
Facebook Messenger
Facebook Messenger
Know when people have seen your messages.; Forward messages or photos to people who weren't in the conversation.
Rank #4
Facebook Messenger
  • Know when people have seen your messages.
  • Forward messages or photos to people who weren't in the conversation.
  • Search for people and groups to quickly get back to them.
  • Turn on location to let people know when you're nearby.
  • See who's available on Messenger and who's active on Facebook.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.