To be clear, they are absolutely being fined for storing passwords in plaintext.

They chose not to mitigate the fine by following proper procedure.