Breachesby GlyphDisclosed Mar 15, 2022Settled
Twelve 2018 Facebook breach notifications; Irish DPC fine of EUR 17M
Ireland's DPC examined twelve breach notifications Facebook filed between June and December 2018 and found Meta lacked appropriate technical and organizational measures to protect EU users' data. It fined Meta EUR 17M.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Mar 15, 2022 |
| Discovered | Jun 2018 |
| Attack | Not stated |
| Data exposed | Other |
| Sector | Tech · US |
| Status | Settled |
| Lawsuit or fine | EUR 17M Irish DPC fine (March 2022) (about $19M) |
Sources
Notices filed
Other breaches at Facebook
Hacking breachHacking exposed emails, location data, names, passwords and phone numbers.77K accountsTechUnverifiedFeb 22, 2024Scraped dataset of 533M Facebook users posted online; Irish DPC fine of EUR 265MScraping exposed dates of birth, emails, employment records, location data, names and phone numbers.Scraping533M affectedTechUSApr 3, 2021Exposed server holds 419 million records linking Facebook IDs to phone numbersScraping exposed phone numbers.ScrapingTechUSUnverifiedSep 4, 2019Hundreds of millions of passwords stored in plaintext; Irish DPC fine of EUR 91MExposed data exposed passwords.Exposed dataTechUSMar 21, 20192018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MHacking exposed names, emails, phone numbers, location data, employment records, dates of birth and children's data.Hacking29M affectedTechUSSep 28, 2018Data of up to 87 million Facebook users improperly shared with Cambridge AnalyticaVendor breach exposed names and location data.Vendor breach87M affectedTechUSMar 17, 2018
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.