[zaarn]

Not the first; a german chat app was hit by a minor fine because they stored passwords in cleartext in 2018.

[laurentl]

Sorry, I meant "the first by CNIL" (or even more specifically, the first in the list of previous fines that was a couple of posts above)