Facebook (2019)

Over 533 million Facebook records were scraped and published publicly in 2019, including phone numbers linked to account IDs that Meta had collected for two-factor authentication. The data resurfaced on hacking forums in 2021, fueling a wave of SIM-swapping attacks. Ireland's DPC fined Meta €265 million for the violation.