Former WhatsApp Security Chief Sues Meta

Key Facts:

• Ex-WhatsApp Head of Security Attaullah Baig alleges app has severe data protection issues
• Claims 1,500 employees had access to sensitive user data including IP addresses and profile photos
• Lawsuit accuses Meta of GDPR violations and failing FTC commitments after Cambridge Analytica
• Baig says Meta tried to “silence” him before dismissing him in April 2025
• Meta denies claims, citing Baig’s “poor performance” as reason for dismissal

WhatsApp is facing fresh scrutiny after its former Head of Security filed a lawsuit against parent company Meta. Attaullah Baig, who led security for over four years before being dismissed this spring, alleges the messaging giant allowed more than 1,500 employees unrestricted access to user data, including IP addresses, profile images, and contact information. He claims this could have been used or shared without user knowledge, putting WhatsApp’s 3 billion–plus global users at risk.

The complaint, filed in California, accuses Meta of ignoring repeated warnings about flaws and of attempting to “silence” Baig. He further alleges that WhatsApp fails to comply with GDPR requirements and lacks sufficient resources to defend against large-scale cyberattacks or account takeovers. These claims echo past controversies, including Meta’s 2018 settlement with the FTC over the Cambridge Analytica scandal.

Meta has strongly denied the allegations, stating Baig was let go for poor performance, not his concerns about security. The company maintains WhatsApp remains committed to user privacy and safety. The case is at an early stage, with no court date set, leaving the possibility of a lengthy legal battle — or a quiet settlement — ahead.