Former WhatsApp Security Chief Sues Meta, Alleging Major Privacy Risks

In a significant legal development, a former WhatsApp executive has filed a lawsuit against Meta, alleging that the company ignored critical security vulnerabilities that endangered billions of users. The case was initiated by Ataulla Beg in the U.S. District Court for the Northern District of California, where he served as WhatsApp's Head of Security from 2021 until early this year.

Beg claims that thousands of Meta and WhatsApp employees had unrestricted access to sensitive user data, such as profile photos, contact lists, and location details, without adequate oversight. He further alleges that the company turned a blind eye to widespread account hacking incidents, reportedly affecting over 100,000 accounts daily.

According to the complaint, Beg repeatedly warned senior executives, including Meta CEO Mark Zuckerberg, about these risks. Instead of addressing his concerns, the company allegedly retaliated by issuing a negative performance review and ultimately terminating his employment in February.

Beg argues that Meta’s actions violated a 2019 privacy settlement agreement with the Federal Trade Commission (FTC), which required the company to strengthen user protections following the Cambridge Analytica scandal.

"The harm users are facing is just too great," Beg told The New York Times. "This is about holding Meta accountable and putting users first."

Meta Responds

Meta has strongly denied Beg's allegations. "Unfortunately, this is a familiar pattern — a former employee was let go due to performance issues and is now publicly misrepresenting facts to distort public perception of our team's ongoing efforts," said Carl Woog, WhatsApp’s Global Head of Communications, in a statement cited by The New York Times.

Meta also noted that the Occupational Safety and Health Administration (OSHA) had previously dismissed Beg’s initial retaliation complaint earlier this year.

Beg’s lawsuit adds to a growing list of whistleblower cases against Meta, which operates Facebook, Instagram, and WhatsApp. In recent years, the company has faced investigations and fines in both the U.S. and Europe over data handling and privacy practices.

In 2019, Meta paid a record $5 billion fine to settle privacy-related charges. Since then, regulators have continued to scrutinize its platforms, including WhatsApp, which now has more than 3 billion global users.

Prior to joining WhatsApp, Beg worked in cybersecurity at PayPal and Capital One. He says his goal extends beyond personal compensation to include regulatory action. He claims that Meta’s failures continue to expose users to risk and emphasizes the need for stronger accountability measures.

The lawsuit seeks reinstatement, back pay, damages, and additional regulatory oversight. Although the case is still in its early stages, it has reignited discussions about how one of the world’s largest tech companies manages personal data and safeguards user privacy.