WhatsApp Security Flaw Exposed Data of 3.5 Billion Users

Editor
2 Min Read
whatsapp

Ahmed Kamel – Egypt Daily News

A recent security vulnerability in WhatsApp has put the personal information of 3.5 billion users at risk, highlighting the challenges of balancing convenience with privacy on widely used digital platforms. The flaw, which existed for several years, allowed anyone to access basic user information, including phone numbers, profile photos, and profile text, without advanced hacking techniques.

Earlier this year, researchers in Austria demonstrated how easily the system could be exploited, testing nearly 100 million phone numbers per hour. By using WhatsApp Web, the browser-based interface, they were able to add billions of phone numbers in bulk. The platform would then indicate whether each number had an account and display associated profile information. For those with limited privacy settings, this meant exposure of profile photos and text, affecting approximately 57 percent and 29 percent of users, respectively.

The vulnerability, which Meta the parent company of WhatsApp, was first warned about in 2017, remained unaddressed for years. It was only after the Austrian researchers reported the issue in April 2025 that Meta implemented rate-limiting in October, reducing the potential for large-scale exploitation.

Meta has stated that the exposed data was “basic publicly available information” and emphasized that no non-public data was accessed. Users who had adjusted their privacy settings were protected, and there was no evidence that hackers exploited the vulnerability.

Although the risk was confined to publicly available information, the incident underscores the importance of digital security, even on trusted platforms. Experts advise users to carefully manage privacy settings, limit who can view profile information, and remain vigilant about personal data shared online.

This is not the first time WhatsApp has faced a significant data exposure. In 2022, a breach affected 32 million users in the United States alone, highlighting ongoing challenges in securing one of the world’s most popular messaging applications.

Share This Article