Facebook says it suffered a massive breach that put 50 million users at risk. The social network is forcing 90 million users to log back into their accounts. The Irish Data Protection Commission has signaled that it finds Facebook’s breach report to have been incomplete. Under the EU’s General Data Protection Regulation, organizations that suffer a serious breach involving Europeans’ personal data must report the breach to relevant authorities within 72 hours of becoming aware of it. Failure to do so, as well as more general information security shortcomings, can expose an organization to steep fines.”]
Source: https://www.cuinfosecurity.com/facebook-submits-gdpr-breach-notification-to-irish-watchdog-a-11573