Facebook said at the time that the information, some of which had already appeared online a number of years ago, was "scraped", but not hacked, by malicious actors through a vulnerability in its tools prior to September 2019.The social network said it patched the vulnerability in 2019, preventing any further data from being harvested.As part of its investigation, the Data Protection Commission carried out an examination and assessment of Facebook Search, Facebook Messenger Contact Importer and Instagram Contact Importer tools in relation to processing carried out by Meta during the period between 25 May 2018 and September 2019."The risks are considerable for individuals in terms of scamming, spamming, smishing, phishing and loss of control over their personal data so we imposed a fine of €265m in total," Ms Dixon said."We are concerned and we are keeping in close contact with Twitter, we have a number of open inquiries with Twitter," Ms Dixon said."