Key Points:
- A Milan court accepted a major class action lawsuit brought by a consumer group against Meta Platforms.
- The legal action centers on a massive data scraping incident that occurred between January 2018 and September 2019.
- The data breach affected roughly 533 million Facebook users globally, including an estimated 35 million people in Italy.
- Meta firmly denies any wrongdoing, calling the class action meritless and expressing confidence that the case will be dismissed.
A Milan court opened the door for a massive legal battle against Meta Platforms on Tuesday. The judges officially accepted a class action lawsuit brought by a prominent consumer advocacy group against the American technology giant. The legal fight centers entirely on a massive theft of personal data that Facebook Italy suffered several years ago. This ruling allows millions of everyday citizens to seek financial compensation for the breach of their digital privacy.
The details of the breach reveal a massive security failure. According to the official court order, unknown hackers carried out a highly sophisticated data-scraping operation against Facebook’s servers. This incident spanned a long period, from January 2018 to September 2019. The hackers systematically pulled private phone numbers, names, locations, and email addresses directly from the social media platform. Meta did not officially disclose this massive data leak to the public until 2021.
The global scale of the theft is staggering. The court documents show that the scraping incident exposed the private information of roughly 533 million Facebook users worldwide. In Italy alone, the damage was incredibly severe. A local legal source estimated that the massive data-scraping operation could affect around 35 million Italian Facebook users. This massive number represents more than half of the country’s population.
A powerful consumer association, the CTCU, is leading the legal charge against the tech giant. The group filed a class action seeking financial compensation directly on behalf of the affected social media users. The CTCU argues that everyday citizens lost control over their most personal data because Facebook failed to protect its servers. The group also claims that the mere fear of losing control over this data caused serious distress to users who suddenly worried about identity theft and online fraud.
The lawsuit leans heavily on strict European privacy laws. The CTCU argues that the massive data breach directly violates the European Union’s General Data Protection Regulation (GDPR). These strict rules require technology companies to securely protect the personal information of European citizens. If a company fails to protect that data, the GDPR allows governments and citizens to seek massive financial penalties in court.
Meta Platforms immediately fought back against the court’s decision. A company spokesperson released a statement shortly after the news broke. The spokesperson stated that Meta respectfully disagrees with the court’s decision to accept the case. The representative was quick to point out that this specific court ruling is only a basic procedural step. The court merely allowed the lawsuit to proceed; it did not find that Meta violated any specific laws.
The tech giant plans to fight the lawsuit aggressively in court. The Meta spokesperson called the entire class action completely meritless. The company expressed deep confidence that the judges will ultimately dismiss the case once both sides present their full legal arguments. Meta maintains that it fixed the specific security vulnerability that enabled data scraping years before the company finally disclosed the breach to the public.
Class action lawsuits of this massive size usually take years to resolve in the Italian court system. The consumer group must now begin the complex process of organizing the millions of potential victims. They need to prove exactly how the data breach harmed everyday users and calculate a fair number for financial compensation. Meanwhile, Meta will likely deploy its massive legal team to delay the process and try to have the entire case thrown out on technical grounds.
