Corporate Violations Index
MenuClose

Meta fined €251 million after Facebook token breach

A Facebook design flaw allowed attackers to obtain access tokens affecting about 29 million accounts. The regulator found failures in breach notification, documentation and data protection by design.

Confirmed

Case ID: meta-token-breach-2024

Related records

Amazon ordered to pay $25 million over children’s Alexa recordings

The government alleged that Amazon retained children’s voice recordings indefinitely, disregarded deletion requests and used retained data to improve Alexa’s algorithms.

Status
Confirmed
Company
Amazon
Authority
United States Department of Justice and Federal Trade Commission
Decision date
19 July 2023
Penalty
US$25,000,000
View case

CNIL fines Amazon €35 million over advertising cookies

CNIL found that Amazon Europe Core placed advertising cookies on visitors’ devices before consent and provided inadequate information about their purpose. The authority also found that the mechanism offered to people arriving through an advertisement did not provide valid prior consent.

Status
Confirmed
Company
Amazon
Authority
French Data Protection Authority (CNIL)
Decision date
7 December 2020
Penalty
€35,000,000
View case