A former top cybersecurity executive at WhatsApp, Attaullah Baig, has sued Meta, the app’s parent company. He claims that the company ignored serious security flaws and put billions of users at risk. Baig alleges that Meta retaliated against him for raising these concerns.
Baig, who led security at WhatsApp from 2021 to 2025, says that about 1,500 engineers could access user data without adequate oversight. This, he believes, may have violated a 2020 U.S. government order that fined Meta $5 billion over data mishandling.
Baig warns that over 100,000 accounts are hacked daily, yet Meta allegedly chose to focus on growth rather than fix these issues. His lawsuit points out that basic cybersecurity measures, like proper data management and breach detection, were not implemented. He found that engineers could move or steal user data without any records of the activity.
Despite Baig’s repeated warnings to senior leaders, including WhatsApp’s head, Will Cathcart, and Meta CEO Mark Zuckerberg, he claims nothing was done. Meta acquired WhatsApp for $19 billion in 2014, and today, the app serves three billion users.
Carl Woog, Meta’s vice president of communications, dismissed Baig’s claims as misrepresentations from a former employee who faced performance issues. Baig counters that he faced retaliation, including negative reviews and was ultimately fired in February 2025 for supposed “poor performance.”
Before working at Meta, Baig held significant cybersecurity roles at companies like PayPal and Capital One. He has also filed complaints with various federal regulators regarding Meta’s practices before heading to court.
This lawsuit adds to the growing scrutiny of Meta’s data protection policies. Following the Cambridge Analytica scandal, where data from 50 million Facebook users was misused, Meta agreed to a settlement that remains in effect until 2040.
As the debate around digital privacy intensifies, this case raises questions about companies’ responsibilities in safeguarding user data. Studies show that nearly 80% of consumers worry about their online privacy. Whistleblower cases like Baig’s exemplify how former employees continue to play a crucial role in holding corporations accountable in the digital age.
For further understanding of ongoing issues surrounding data privacy and cybersecurity, consider exploring resources from the U.S. Federal Trade Commission (FTC).