Former Meta Employee in London Under Investigation for Alleged Data Breach
A former worker at Meta, the parent company of Facebook, is currently the subject of a criminal investigation by the Metropolitan Police's cybercrime unit. The man, who resides in London, is suspected of having downloaded approximately 30,000 private images from Facebook users while employed by the social media giant.
According to court documents reviewed by the Press Association, the individual is alleged to have created a specialised script designed to circumvent Meta's internal detection systems. This program reportedly allowed him to access and download the images without triggering security alerts, enabling a significant invasion of user privacy.
Meta's Response and Security Upgrades
Meta confirmed that the suspected breach was discovered over a year ago. The company stated that it immediately terminated the employee's contract upon discovery of the improper access. Affected Facebook users were notified of the incident, and Meta referred the matter to UK law enforcement authorities.
In response to the breach, Meta has implemented enhanced security measures to better protect user data. A company spokesperson emphasised that safeguarding user information remains their top priority, and they are fully cooperating with the ongoing police investigation.
Legal and Regulatory Implications
Jon Baines, a senior data protection specialist at Mishcon de Reya, highlighted the potential legal ramifications. He explained that unauthorised access to personal data by an employee could constitute offences under data protection and computer misuse laws. However, organisations like Meta are generally not held liable if they have appropriate technical and organisational measures in place to prevent or detect such breaches.
The Information Commissioner's Office (ICO) has acknowledged awareness of the incident. An ICO spokesperson reiterated that social media users should be able to trust that their personal information is handled responsibly, underscoring the importance of robust data protection practices.
Broader Context and Recent Developments
This incident occurs against a backdrop of increasing scrutiny on tech giants' data handling practices. Last month, Meta and Google faced a landmark court defeat in Los Angeles, where they were found liable for a woman's childhood social media addiction. This ruling could have widespread implications for how social media platforms operate in the future.
The former Meta employee is currently on police bail, with conditions requiring him to report to Metropolitan Police officers in May and inform them of any foreign travel plans. The investigation continues as authorities delve deeper into the extent of the breach and the methods used to bypass security protocols.
