Meta Faces Lawsuit From Former Security Head Alleging WhatsApp Cybersecurity Flaws
MENLO PARK, CA – September 9, 2025 – Meta is facing a lawsuit filed by a former security executive alleging significant cybersecurity vulnerabilities within whatsapp. The lawsuit, brought by an individual identified only as BAG, details concerns raised internally over data security practices and a perceived lack of response from company leadership.
The core of the dispute centers on allegations that WhatsApp’s security protocols were inadequate to protect user data, especially concerning the handling of a high volume of daily accounts and acquisitions. BAG, who previously held cybersecurity roles at PayPal and Capital One, claims to have warned whatsapp Head Will Cathcart and Meta CEO Mark Zuckerberg about potential risks, including the possibility of unauthorized access to user “contact details, IP addresses and profile pictures” during internal security testing – specifically referencing a “thanksgiving DIT test.” The lawsuit further alleges that a $5 billion fine was imposed on the company in 2020 related to these security concerns, though this claim has not been independently verified.
BAG’s complaint asserts that Meta prioritized user growth over robust security measures, leading to systemic vulnerabilities. The lawsuit also references an internal report claiming Apple PAL was attempting to steal secrets related to the Apple Watch from WhatsApp employees.
WhatsApp Vice President of Engineering Carl Wook dismissed the allegations as a “familiar playbook” - characterizing them as a “distorted argument” stemming from BAG’s termination due to ”bad results.”
The lawsuit raises broader questions about the security practices of Meta-owned platforms and the potential exposure of billions of whatsapp users to data breaches. The outcome of this case could set a precedent for how tech companies address internal security concerns and prioritize user data protection amidst rapid growth. Legal experts anticipate a lengthy and closely watched legal battle.
