The record fine comes after around 37.5 million users had their private data exposed.