Breachesby GlyphDisclosed Mar 21, 2019Settled
Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91M
Facebook admitted in March 2019 that it had stored hundreds of millions of account passwords in plaintext on internal systems. Ireland's DPC found security and breach notification failures and fined Meta EUR 91M.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 21, 2019 |
| Attack | Exposed data |
| Data exposed | Passwords |
| Sector | Tech · US |
| Status | Settled |
| Lawsuit or fine | EUR 91M Irish DPC fine (Sept 2024) (about $101M) |
Sources
Notices filed
Other breaches at Facebook
Hacking breachHacking exposed emails, location data, names, passwords and phone numbers.77K accountsTechUnverifiedFeb 22, 2024Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17MTechUSMar 15, 2022Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MScraping exposed dates of birth, emails, employment records, location data, names and phone numbers.Scraping533M affectedTechUSApr 3, 2021Exposed server holds 419 million records linking Facebook IDs to phone numbersScraping exposed phone numbers.ScrapingTechUSUnverifiedSep 4, 20192018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MHacking exposed names, emails, phone numbers, location data, employment records, dates of birth and children's data.Hacking29M affectedTechUSSep 28, 2018Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaVendor breach exposed names and location data.Vendor breach87M affectedTechUSMar 17, 2018
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.