Facebook and Instagram passwords were stored in plaintext, Meta fined

Ireland’s Data Protection Commission fined Meta €91M after discovery that Facebook and Instagram passwords (reported as up to ~600 million) had been stored in plaintext, a GDPR violation for failing to notify and secure personal data; the report also chronicles multiple large dumps of Facebook user PII (hundreds of millions of records) circulating on forums and the dark web, heightening phishing and identity-theft risk.