Core Viewpoint - A former top security executive at WhatsApp has filed a lawsuit against Meta, alleging systematic violations of cybersecurity regulations and retaliation for reporting these failures [3][4]. Group 1: Allegations of Security Failures - The lawsuit claims that approximately 1,500 engineers had unrestricted access to user data without proper oversight, potentially violating a previous US government order that imposed a $5 billion penalty on Meta in 2020 [4]. - Baig's internal security testing revealed that WhatsApp engineers could "move or steal user data" without detection or an audit trail, raising significant concerns about data handling and breach detection capabilities [5]. - The lawsuit alleges that Meta blocked the implementation of security features intended to address account takeovers affecting an estimated 100,000 WhatsApp users daily, prioritizing user growth instead [6]. Group 2: Retaliation Claims - Baig alleges he faced escalating retaliation after reporting security concerns, including negative performance reviews and ultimately termination in February 2025 for "poor performance" [6]. - The lawsuit includes requests for reinstatement, back pay, and compensatory damages, along with potential regulatory enforcement action against Meta [8]. Group 3: Context and Background - Baig previously held cybersecurity roles at major financial institutions before joining Meta and has filed complaints with federal regulators, including the Securities and Exchange Commission [7]. - The case adds to ongoing scrutiny of Meta's data protection practices across its platforms, which serve billions of users globally [7]. - Meta had previously agreed to a government settlement in 2020 following the Cambridge Analytica scandal, which involved improper data harvesting from 50 million Facebook users, with the consent order remaining in effect until 2040 [8].
Ex-WhatsApp executive sues Meta over alleged security failures