Irish Data Protection Commission fines Meta €91 million for passwords stored in plaintext

Meta discovered in 2019 that some Facebook and Instagram passwords had been temporarily stored in readable plaintext within internal logs. The Irish Data Protection Commission found this practice violated GDPR requirements and fined Meta €91 million; Meta says it fixed the issue, proactively notified regulators and found no evidence the passwords were accessed or misused.