US Authorities Investigate Claims That Meta Can Read Encr...
Tech Beetle briefing GB

US Authorities Investigate Claims That Meta Can Read Encrypted WhatsApp Messages

Essential brief

US Authorities Investigate Claims That Meta Can Read Encrypted WhatsApp Messages

Key facts

A recent lawsuit alleges Meta can access encrypted WhatsApp messages, a claim Meta denies.
The lawsuit is linked to whistleblowers from several countries and involves the law firm representing spyware developer NSO Group.
Experts doubt the claims, noting the improbability of such a secret being kept within WhatsApp.
WhatsApp uses end-to-end encryption, designed to prevent even the company from reading message content.
The case underscores ongoing tensions between privacy, corporate practices, and spyware-related legal battles.

Highlights

A recent lawsuit alleges Meta can access encrypted WhatsApp messages, a claim Meta denies.
The lawsuit is linked to whistleblowers from several countries and involves the law firm representing spyware developer NSO Group.
Experts doubt the claims, noting the improbability of such a secret being kept within WhatsApp.
WhatsApp uses end-to-end encryption, designed to prevent even the company from reading message content.

Recent reports indicate that US authorities have investigated allegations that Meta, the parent company of WhatsApp, can access users' encrypted messages. These claims emerged following a lawsuit filed last week by the law firm Quinn Emanuel Urquhart & Sullivan, which asserts that Meta "can access virtually all of WhatsApp users’ purportedly ‘private’ communications." Meta has categorically denied these accusations, labeling the lawsuit's claims as "categorically false and absurd." The company suggested that the lawsuit may be a strategic move to support the NSO Group, an Israeli spyware developer recently involved in legal battles with WhatsApp.

The lawsuit draws on information from unnamed whistleblowers across multiple countries, including Australia, Brazil, India, Mexico, and South Africa. Notably, Quinn Emanuel is also representing the NSO Group in an appeal against a US federal court judgment that ordered NSO to pay $167 million to WhatsApp for violating its terms of service through the deployment of Pegasus spyware. Meta has responded by pursuing sanctions against Quinn Emanuel, accusing the firm of filing a meritless lawsuit aimed at generating headlines rather than addressing factual concerns.

Experts in security engineering have expressed skepticism about the allegations. Steven Murdoch, a professor at University College London, described the lawsuit as "a bit strange," noting the lack of transparency regarding the whistleblowers' credibility. He emphasized that if WhatsApp were indeed reading encrypted messages, such a breach would likely have been exposed internally or externally, given the difficulty of maintaining such a secret within a large company.

WhatsApp's end-to-end encryption is designed to ensure that only the sender and recipient can read message content, with no intermediary, including WhatsApp itself, able to decrypt the messages. This contrasts with other messaging platforms like Telegram, which encrypt messages between the sender and the platform's servers, theoretically allowing the platform to access message content. Despite WhatsApp's strong encryption, the platform does collect metadata such as user profiles, contact lists, and communication patterns, which has raised privacy concerns among some technology experts.

The US Department of Commerce has been cited in reports as having investigated whether Meta can read WhatsApp messages, though a department spokesperson called these claims "unsubstantiated." Meta maintains that WhatsApp's encryption remains secure and continues to defend users' rights to private communication. The ongoing legal and public scrutiny highlights the complex challenges of balancing user privacy, corporate transparency, and the implications of spyware and surveillance technologies in the digital age.