A former WhatsApp security executive has filed a federal lawsuit accusing parent company Meta of failing to comply with cybersecurity regulations and retaliating against him for flagging risks.
Attaullah Baig, who served as WhatsApp’s head of security from 2021 to 2025, claimed that around 1,500 engineers had unrestricted access to user data, potentially violating a $5-billion US government consent order imposed in 2020.
Baig alleged that Meta ignored security flaws, blocked fixes for account takeovers affecting about 100,000 users daily, and retaliated against him with poor reviews and eventual termination in February 2025.
Meta denied the charges, calling Baig’s claims “distorted,” disputing his role as head of security, and citing a prior government finding that dismissed his retaliation complaint.
The case intensifies scrutiny of Meta’s data privacy practices as it continues to face global regulatory pressure.
Source: PhilNews24 | September 9, 2025
