A former WhatsApp security chief, Attaullah Baig, has filed a federal lawsuit against Meta, accusing the company of systemic cybersecurity failures that exposed user privacy vulnerabilities. Baig, who was head of security at WhatsApp from 2021 until his termination in early 2025, alleges that about 1,500 engineers had unrestricted access to sensitive user data, including contact information, IP addresses, and profile photos, with no oversight or audit trail. His complaint claims that WhatsApp lacked fundamental security measures such as a 24-hour security operations center and reliable breach detection systems, contributing to widespread account takeovers affecting over 100,000 users daily. Baig also contends that he faced retaliation, including poor performance reviews and dismissal, after repeatedly alerting senior Meta executives, including CEO Mark Zuckerberg, about these issues. Meta denies the allegations, stating Baig exaggerated his role and was dismissed for poor performance. This lawsuit adds to the ongoing scrutiny of Meta’s data practices under federal orders imposed in 2020, underscoring the critical need for enhanced cybersecurity and regulatory compliance at scale. The case is pending in the U.S. District Court for Northern California.