US Court Dismisses Whistleblower Lawsuit Against Meta by Former WhatsApp Security Head

A federal judge in California dismissed a whistleblower lawsuit brought by Willian Moss, the former head of security for WhatsApp, against Meta Platforms Inc. Moss alleged that Meta fired him in retaliation for warning that the company's practices endangered the privacy of billions of users. The judge ruled that there was insufficient evidence to substantiate the retaliation claims.

Moss joined WhatsApp in 2017 following Meta's acquisition of the app and served as head of security until his dismissal in 2021. He claimed in the lawsuit, filed in 2022, that Meta prioritized business interests over user safety by delaying fixes to security vulnerabilities. The case was heard in the US District Court for the Northern District of California.

conducted an internal investigation into Moss after discovering he had downloaded approximately 30,000 private photos from Facebook, according to the company.

The downloads occurred prior to his termination, and Meta stated that the action violated company policies on data handling. BBC News reported that the investigation focused on the suspicious nature of the downloads, which involved user-uploaded images not related to his security role.

The photo download incident was not directly addressed in the whistleblower lawsuit dismissal, but it emerged as a key factor in Meta's defense against Moss's claims.

Court documents referenced the investigation as part of the rationale for his firing, separate from any whistleblowing activities. No criminal charges have been filed against Moss related to the downloads, per available reports.

Practices WhatsApp, with over 2 billion users worldwide, relies on end-to-end encryption to protect message and media content.

Moss's lawsuit highlighted alleged lapses in Meta's implementation of these features, claiming they exposed users to risks from state actors and cybercriminals. The New York Times noted that the suit sought to hold Meta accountable under the False Claims Act for misleading government contracts on security standards.

Meta has maintained that Moss's termination stemmed from policy violations, not his internal reports on security issues.

The company emphasized its commitment to user privacy in public statements following the ruling. The dismissal does not preclude Moss from refiling or appealing the decision.

“There is not enough evidence supporting claims that he was fired in retaliation.”

This ruling adds to a series of challenges faced by tech industry whistleblowers seeking legal protections. Similar cases against companies like Google and Uber have seen mixed outcomes in federal courts. Legal experts observe that proving retaliation requires concrete evidence of protected activity directly linking to termination.

The case underscores ongoing tensions between tech firms and employees raising internal concerns about data privacy. Meta faces multiple regulatory scrutiny worldwide over its handling of user data, including investigations by the European Union and Federal Trade Commission.

The dismissal may influence future whistleblower strategies in the sector.