Ireland Fines Meta €251 Million Over Facebook Hacks

AFP | Dublin, Ireland 

Email : editor@newsofbahrain.com

Ireland’s Data Protection Commission (DPC), which enforces EU data privacy laws, fined Facebook owner Meta €251 million ($263 million) for a 2018 data protection failure that allowed hackers to access users’ accounts.

The security flaw in Facebook's video upload function enabled hackers to exploit the platform, giving them full access to approximately 29 million accounts worldwide, including three million within the EU. Exposed personal data included email addresses, phone numbers, locations, and workplace information.

"The failure to build in data protection requirements throughout the design and development cycle can expose individuals to very serious risks and harms," said Graham Doyle, the DPC's head of communications. He added that the breach created a significant risk of misuse of sensitive profile information.

Meta resolved the issue shortly after its discovery and reported it to the regulator in September 2018. “We took immediate action to fix the problem as soon as it was identified, and we proactively informed people impacted as well as the Irish Data Protection Commission,” a Meta spokesperson stated.

Big Tech Under Scrutiny
This fine is part of a broader crackdown on major tech companies, with regulators globally seeking to address issues related to privacy, competition, misinformation, and taxation.

The EU’s General Data Protection Regulation (GDPR), introduced in 2018, has played a central role in holding tech companies accountable for data breaches. Ireland, home to many tech giants like Google, Apple, and Meta due to its favorable corporate tax rate, is the lead regulator overseeing their compliance.

The DPC has previously issued fines to Meta for data breaches on its Instagram, WhatsApp, and Facebook platforms. In September, the commission fined Meta €91 million for failing to secure users’ password data and delaying notifications about the breach.

The fines, though substantial, are dwarfed by the multi-billion-dollar earnings of these tech firms. Recent penalties have also targeted other major players, including a €310 million fine against Microsoft-owned LinkedIn for personal data breaches related to targeted advertising.

Ireland’s stringent enforcement of GDPR continues to shape the regulatory landscape for global tech companies operating in the EU.