Meta fined 91m by Irish data privacy regulator for storing passwords in unencrypted plain text

Graham Doyle, deputy commissioner at the DPC, highlighted that it is 'widely accepted that user passwords should not be stored in plaintext,' emphasizing the risks of such practices.

The DPC stated that Meta was fined for multiple breaches of GDPR law, including 'failure to notify the DPC of a personal data breach concerning storage of user passwords in plain text.'

Meta's penalty, now surpassing €2bn, stems from significant GDPR violations, demonstrating the implications of inadequate security measures on user data.

Read at Irish Independent