The former head of security at WhatsApp has filed a lawsuit accusing Meta Platforms of ignoring serious security flaws that exposed billions of users’ data, and retaliating against him when he raised concerns.
In a suit lodged in U.S. District Court in California, Attaullah Baig alleged that Meta employees had broad access to sensitive data such as profile pictures, group memberships, and contact lists. He also claimed the company failed to fix vulnerabilities that allowed more than 100,000 accounts to be hacked daily.
Baig said he repeatedly warned senior executives, including CEO Mark Zuckerberg, but was ignored and later fired in February 2024. “This is about holding Meta accountable and putting the interests of users first,” Baig said.
Meta dismissed the allegations. “This is a familiar playbook in which a former employee goes public with distorted claims that misrepresent the hard work of our team,” WhatsApp spokesperson Carl Woog said.
Baig’s claims come as Meta faces multiple whistleblower complaints, including accusations that its VR products expose children to harm. The lawsuit argues Meta’s actions violate a 2019 privacy settlement with the U.S. Federal Trade Commission, under which it paid a record $5 billion fine.
