Meta faces €251m fine over 2018 data breach affecting children

Ireland's Data Protection Commission has fined Meta €251 million following an inquiry into a 2018 security breach that exposed the contact details of Instagram users, including children. The Commission found that Meta failed to implement appropriate technical and organisational measures to protect user data, in breach of GDPR requirements, and that the incident particularly affected younger users whose information was made accessible without adequate safeguards.

The enforcement action underscores regulatory expectations that platforms protect minors through design, not retrospective response. For child users at elevated risk of contact-based harm, technical safeguards must extend beyond data security to interception of predatory behavior. Guardii's age-inappropriate contact and anti-grooming detection filters, backed by Startmate and operating as a Meta Business Partner, flag hostile or coercive adult-to-child messaging patterns in real time, blocking contact before it reaches the target and enabling schools, parents and law enforcement to act on substantiated risk rather than waiting for a breach or disclosure.