Ex-WhatsApp Security Head Sues Meta Over Alleged User Data Access Failures

Attaullah Baig, the former head of security at WhatsApp, has filed a federal whistleblower lawsuit against Meta alleging that the company ignored systemic cybersecurity failures that exposed billions of users' data to unauthorized access. Baig claims that around 1,500 WhatsApp engineers had unrestricted access to sensitive user information without oversight, potentially violating a $5 billion FTC privacy settlement and compromising user security, including failure to address the daily hacking of over 100,000 accounts. Despite reporting these issues and proposing fixes, Baig alleges Meta prioritized user growth over security, dismissed his warnings, and retaliated against him with negative reviews and eventual termination. The lawsuit accuses Meta of failing to implement adequate data handling, breach detection, and access controls, which undermined WhatsApp's end-to-end encryption and compliance with privacy laws like GDPR. Meta has denied the allegations, asserting that its security measures are robust and that WhatsApp remains one of the most secure messaging platforms globally. This case highlights ongoing scrutiny of Meta's data protection practices and raises concerns about internal access to user data and corporate transparency.