WhatsApp data breach: 500 million user records for sale

WhatsApp, the encrypted messaging platform now owned by Meta, was apparently breached or hacked. Over 500 million user mobile phone numbers are now available for sale on an underground hacking forum. The data is described as “a users database of recent 2022 updated”, representing 84 countries. Approximately 32 million US user mobile phone numbers are included.

It’s unclear at this time how the data was acquired; whether WhatsApp was hacked, or some other compromise.

An anonymous user from a known hacking forum announced the breach and database available for sale. WhatsApp has approximately two billion monthly active users, so the database leak is significant—approximately 25% of all users.

Interestingly, the database is up for sale based on country. The US dataset is $7,000, and Britain for $2,500. Other countries available include Egypt, Italy, Saudi Arabia, France, Turkey, and Russia.

Ironically, an ad is currently running in the US boasting of WhatsApp’s secure, encrypted messaging.

https://www.youtube.com/watch?v=zvI4cVGWJhM
WhatsApp advertisement highlighting encrypted messaging.

Multiple publications and members of the media have contacted Meta for an official statement.

Up to 2,000 numbers were shared with Cybernews in a sample request to verify the claim.

Facebook suffered a similar breach of 1 million user accounts only last month. Facebook is owned by Meta.


Discover more from Cybersecurity Careers Blog

Subscribe to get the latest posts sent to your email.