Former Meta Engineer Accused of Stealing 30,000 Private Facebook Photos, Prompting Police Probe and Security Overhaul
A former Meta employee based in London is being investigated by the Metropolitan Police’s cybercrime unit for allegedly downloading roughly 30,000 private Facebook images while employed by the company.
According to court documents obtained by the Press Association, the suspect is said to have created a script designed to circumvent Meta’s internal detection systems, allowing him to access and extract the images without triggering security alerts.
Meta confirmed that the breach was discovered more than a year ago. The company immediately terminated the employee, notified the affected users, and referred the matter to UK law enforcement. It also announced that its security infrastructure has been enhanced to prevent similar incidents.
The individual remains on police bail, with magistrates requiring him to report to officers in May and to disclose any plans for foreign travel.
Legal experts note that while the rogue employee could face charges under data‑protection and computer‑misuse laws, Meta’s liability hinges on whether it had “appropriate technical and organisational measures” in place. As senior data‑protection specialist Jon Baines of Mishcon de Reya explains, “If the employer has sufficient safeguards, the law does not punish the organisation for the actions of a rogue employee.” However, a finding that Meta’s safeguards were inadequate could expose the company to substantial fines or damages.
The Information Commissioner’s Office (ICO) acknowledged the incident, emphasizing that “social media users should be able to trust that their personal information is handled responsibly.”
Meta’s challenges come amid broader scrutiny of major platforms. Last month, a Los Angeles court held both Meta and Google liable for a woman’s childhood social‑media addiction, a ruling that could reshape platform accountability.