Security Flaw in Video Upload Feature
An Irish data privacy watchdog, the Data Protection Commission (DPC), has imposed a fine of €251 million (approximately $263 million) on Meta, the company owning Facebook, for a significant data protection lapse. This penalty stems from a security vulnerability in the video upload feature of the platform, which was exploited by hackers to access millions of users’ profiles.
Details of the Data Breach
The breach, which occurred over a two-week span in 2018, compromised around 29 million user accounts worldwide. The personal information that was exposed included email addresses, phone numbers, locations, and employment details, presenting a major privacy concern.
READ ALSO: DR Congo Launches Criminal Case Against Apple Over ‘Blood Minerals’
Regulator’s Critique
Graham Doyle, the DPC’s head of communications, highlighted the dangers of not integrating data protection into the development process, stating, “The failure to build in data protection requirements throughout the design and development cycle can expose individuals to very serious risks and harms, including a risk to the fundamental rights and freedoms of individuals.” He noted that the vulnerability led to unauthorized access to profile information, posing a substantial risk of data misuse.
Response and Previous Penalties
Meta acted quickly to rectify the security issue upon its discovery and informed the DPC in September 2018. However, this incident adds to a growing list of fines for Meta, as regulatory bodies worldwide intensify their scrutiny of tech giants. Just recently, in September, the same commission had levied a €91 million fine against Meta for inadequate protection of user passwords and delays in reporting security breaches.
