Former WhatsApp Security Chief Attaullah Baig has filed a federal lawsuit against Meta, accusing the company of ignoring critical cybersecurity flaws that put billions of users at risk.
The lawsuit alleges that 1,500 Meta engineers had unrestricted access to sensitive WhatsApp user data such as messages, contacts, location, and profile photos—violating privacy standards and a 2020 FTC settlement.
Key Allegations in Attaullah Baig’s Lawsuit
- Up to 500,000 WhatsApp accounts compromised daily during internal tests.
- Meta failed to enforce basic monitoring and remediation protocols.
- Senior leaders, including Mark Zuckerberg and Will Cathcart, allegedly resisted Baig’s warnings.
- Baig claims retaliation through poor performance reviews, blocked projects, and eventual termination in February 2025.
He also filed complaints with the SEC and OSHA, while teaming with Psst.org, a nonprofit watchdog group.
Meta’s Response
Meta denied all allegations, calling Baig a “disgruntled former employee” who was terminated for poor performance. The company insists its security systems are strong and claims Baig misrepresented internal practices.
Why This Lawsuit Matters
This lawsuit adds to growing concerns over Big Tech’s handling of user privacy. Baig’s case mirrors high-profile whistleblower complaints like Twitter’s Peiter “Mudge” Zatko, showing an industry-wide struggle between user safety and corporate growth priorities.
