**
A former employee of Meta, the parent company of Facebook, is currently embroiled in a criminal investigation following serious allegations of downloading around 30,000 private images from user accounts. The engineer, who was still with the company at the time of the incident, is accused of developing a script that allowed him to bypass internal security measures. This revelation has raised significant concerns over privacy and data protection within one of the world’s largest social media platforms.
Investigation Launched by Cybercrime Unit
A specialist detective from the Metropolitan Police’s cybercrime division has initiated an inquiry into the alleged breach, which Meta claims was identified over a year ago. The company reported the incident to the authorities, and affected users have since been informed about the potential compromise of their personal data.
Meta has affirmed that the employee in question was terminated as soon as the breach was uncovered, and security protocols have been intensified to prevent future occurrences. The individual, who resides in London, is currently on police bail while the investigation progresses.
According to documents reviewed by the Press Association, the suspect is accused of accessing and downloading a significant number of private images belonging to Facebook users during his tenure at Meta. The police allege that he created a malicious script specifically designed to evade the company’s internal monitoring systems, thereby gaining unauthorised access to user data.
Legal Proceedings and Company Responses
In a recent development, two magistrates modified the conditions of the suspect’s police bail, requiring him to report back to police officers in May and notify them of any international travel plans. This adjustment underscores the seriousness of the allegations and the ongoing nature of the investigation.
A spokesperson for Meta has publicly acknowledged the criminal probe, asserting that the protection of user data remains the company’s foremost priority. “Upon discovering improper access by an employee over a year ago, we took immediate action by terminating the individual, notifying users, referring the matter to law enforcement, and enhancing our security measures,” the spokesperson stated. They also confirmed that Meta is fully cooperating with the ongoing investigation.
A History of Security Breaches
This incident is not the first time Meta has faced scrutiny regarding its data security practices. In 2018, a significant bug allowed third-party applications to gain broader access to user photos, potentially impacting up to 6.8 million accounts. Furthermore, in 2024, Meta was fined €91 million by the Data Protection Commission in Ireland due to the improper storage of millions of user passwords in plaintext, exposing them to potential breaches.
The timing of this latest revelation is particularly precarious for Meta, as it comes on the heels of a landmark court ruling in Los Angeles. A court found Meta and Google liable for failing to protect a woman from the harmful effects of childhood social media addiction, a decision that could lead to more stringent operational regulations for the tech giants in the future.
Why it Matters
The implications of this investigation extend far beyond the individual case. As data privacy grows into a pivotal issue in the tech landscape, this incident highlights the vulnerabilities inherent in even the largest platforms. Users increasingly demand accountability and robust protections for their personal information. The scrutiny Meta faces today could prompt broader regulatory changes across the industry, forcing tech companies to reassess their data handling practices and prioritise user security. As the digital world evolves, maintaining trust will be crucial for platforms that rely on user engagement and data.
