.png){kind=logo}
Meta, the parent company of WhatsApp, is facing a serious lawsuit filed in a San Francisco federal court. The case comes from Attaullah Baig, a former WhatsApp security head, who claims the company failed to follow basic cybersecurity protocols and then punished him for speaking out.
Baig worked at WhatsApp from 2021 until February 2025. In his complaint, he claims that about 1,500 engineers inside the company had free access to private user data. This data included contacts, profile pictures, and IP addresses. He says that this open access broke a 2020 US settlement, which had already cost the tech giant $5 billion after the Cambridge Analytica-based Meta controversy.
The former WhatsApp security head reveals that internal checks showed that engineers could move or even steal data without leaving a trace. He raised the matter with senior leaders, including WhatsApp chief Will Cathcart and Meta CEO Mark Zuckerberg. But instead of fixing the issue, he says the company turned against him.
According to the WhatsApp security lawsuit, Baig received poor performance reviews, warnings, and ultimately faced dismissal in early 2025. He also says Meta blocked new safety tools that could have reduced account takeovers. These hacks reportedly affected around 100,000 WhatsApp accounts each day. He argues that the company puts growth above user safety.
Meta has strongly rejected the claims. A WhatsApp spokesperson said Baig was removed owing to poor work, with several senior engineers backing that view. The company called his lawsuit a “familiar playbook” of ex-employees making false claims after being let go. Meta added that the US Department of Labor had already dismissed his earlier retaliation complaint.
This case comes at a time when Meta is already under global pressure. Regulators continue to monitor how Facebook, Instagram, and WhatsApp handle personal data. The company is also facing criticism over child safety concerns in its virtual reality products.
Attaullah Baig wants to be reinstated in his job along with reparatory fees. He has asked the regulators to pursue fresh action against Meta. This case highlights the increasing importance of privacy and cybersecurity in the world's largest tech houses. Claims found to be true will become additional points of turmoil, contending for stricter regulations on data access and user protection by companies.
Also Read – WhatsApp New Feature Update: Supports Live Photos with Sound and Motion for iPhone Users
