
A former Meta engineer based in London is currently under investigation by the Metropolitan Police for allegedly downloading approximately 30,000 private images from Facebook users. The breach, which was uncovered by the social media giant more than a year ago, led to the immediate termination of the employee and a subsequent referral to international and local law enforcement agencies. The incident underscores persistent vulnerabilities within major tech platforms and the potential for internal threats to compromise user privacy on a massive scale.
According to reports, the individual—a man in his 30s—reportedly developed a specialized program designed to bypass Meta's security protocols, allowing him unauthorized access to personal photos that were not intended for public viewing. Following a referral from the United States Federal Bureau of Investigation (FBI), the Metropolitan Police’s Cybercrime Unit took over the case. The suspect was arrested in November 2025 on suspicion of unauthorized access to computer material. While he has since been released on bail, he is required to report back to the police in May 2026 as the investigation continues.
In response to the discovery of the breach, Meta has taken several steps to mitigate the impact and prevent future occurrences. The company has officially notified the affected Facebook users whose private images were compromised and stated that it has since upgraded its security systems and internal monitoring protocols to better detect and block similar unauthorized activities. This proactive stance is part of an effort to rebuild user trust following the exposure of such a significant internal security flaw and to demonstrate a commitment to data protection.
This latest scandal adds to a growing list of security and legal challenges faced by Meta, which has previously been hit with substantial fines for various data breaches and is currently navigating multiple legal battles concerning its platform design. As the Metropolitan Police continue their probe, the case highlights the critical importance of robust internal controls and the ongoing battle tech companies face against both external hackers and insider threats. The outcome of this investigation will likely influence how global tech firms manage employee access to sensitive user data moving forward.
Continue exploring similar stories