Ireland fines Meta €91 million for storing passwords in plaintext

The Irish Data Protection Commission fined Meta €91 million after Meta disclosed in 2019 that it had inadvertently stored hundreds of millions of user passwords in plaintext on internal systems; the DPC cited violations of multiple GDPR provisions related to security, breach notification, and documentation, while noting no evidence of external access or abuse.