350 Million WhatsApp Users' Data Leaked, Urgent Warning Issued

In a major security breach, over 350 million WhatsApp users' personal data, including phone numbers and profile pictures, has been leaked, putting all users' information at risk. This alarming discovery was made public by cybersecurity researchers from the University of Vienna and SBA Research, who found a significant flaw in the app's security system that allowed unauthorized access to sensitive user details.

The breach occurred due to a vulnerability in WhatsApp’s security infrastructure or a potential glitch within the Meta platform, which facilitates the app's operations. Researchers have indicated that such an abnormal volume of data requests raised red flags, leading them to uncover the flaw, which allowed almost unlimited requests to be made.

The research team, led by Gabriel Gegenhuber, stated that while end-to-end encryption protects the content of messages, the metadata—such as phone numbers and profile pictures—remains unprotected. With the analysis of such vast amounts of metadata, users' privacy has been seriously compromised.

Using WhatsApp's web interface, researchers were able to collect millions of phone numbers every hour, identifying 57% of the app's users and accessing their profile images. Furthermore, they were able to view chat information of approximately 29% of users, raising even more concerns.

Meta has acknowledged the security flaw, confirming that the issue has now been resolved. However, experts warn that, although the data is publicly available, it poses a serious risk if it falls into the wrong hands, especially for unauthorized individuals or third parties.

WhatsApp’s Engineering Vice President, Nitin Gupta, stated that the researchers helped them responsibly through their bug bounty program. While the new method showed that certain data could be scraped, he assured that the app’s end-to-end encryption of messages was not compromised.

This breach highlights the ongoing challenges in securing personal data and the importance of maintaining privacy standards in today’s digital world.