Facebook Faces $1.6bn Fine Over Major Data Breach
Are you aware of a potentially serious data breach involving Facebook?
The Irish Data Protection Commission (IDPC) has opened a formal investigation into Facebook following a significant data breach affecting nearly 50 million accounts. The breach, discovered on September 24, 2018, allowed hackers to exploit the platform’s “View As” feature to steal access tokens—digital keys granting full control over user accounts and connected third-party applications. Facebook patched the vulnerability two days later.
The investigation will evaluate Facebook’s compliance with the General Data Protection Regulation (GDPR), a European privacy law requiring robust security measures to protect user data. Non-compliance could result in a fine of up to $1.63 billion, though experts believe such a penalty is unlikely.
The IDPC expressed concerns about Facebook’s delay in clarifying the nature of the breach and its risks to users. While Facebook assured the commission of its ongoing internal investigation and remedial actions, critics have accused the company of insufficient security testing. Data protection expert Rowenna Fielding argued that Facebook failed to assess the potential risks of its “View As” feature adequately.
This case marks a critical test for GDPR enforcement. Dr. Lukasz Olejnik, a cybersecurity expert, called it a defining moment for the regulation, as it examines whether Facebook implemented appropriate measures to secure user data.
The breach, the largest in Facebook’s history, has intensified scrutiny on the platform, already criticized for issues like election interference and spreading misinformation. The IDPC’s findings could set a significant precedent, potentially opening the door to litigation from affected users.
As Facebook cooperates with the investigation, the outcome could reshape expectations for tech giants’ accountability in safeguarding personal data under GDPR.
