WhatsApp fixes a flaw that made phone numbers of users public

1
WhatsApp fixes a flaw that made phone numbers of users public
A WhatsApp vulnerability that allegedly left the phone numbers of around 300,000 people exposed has now been fixed.

The loophole was within the Click to Chat feature which streamlines conversations. It was first revealed by the WhatsApp-focused website WaBetaInfo and later reported by security researcher Athul Jayaram.

The feature lets users create a wa.me/ URL that can be shared with friends and prospective customers to initiate a chat or join a group, without requiring them to save a phone number first. 

WhatsApp should have asked Google and other search engines to not index these links. Except that it didn't and that's why all it took was a “site:wa.me” search for phone numbers of some WhatsApp users to show up in search results. Some searches even turned up messages and images.

WhatsApp has now de-index the associated webpages. Phone numbers still remain a part of the short URL, but they will not be indexed by crawlers. 

Recommended For You

Facebook says it was aware of the issue already


This was no minor flaw and goes as far back as February. Facebook claims it was already working on it when Jayaram escalated it and that the phone numbers he stumbled upon were probably old results cached by Google. 

Here is what a WhatsApp spokesperson said on the matter:


Regardless of what Facebook says, the nowp-fixed flaw is not a good look for a company whose CEO was summoned to Congress over privacy lapses.

Get Visible as low as $20/mo for 1 year. Limited time offer with code: FRESHSTART

$20 /mo
$25
$5 off (20%)
Offer Ends 6.1.2026 at 11.59pm ET. New members get $5/mo off the $25/mg Visible plan, $35/mo Visible+ plan, or $45/mo Visible+ Pro plan for the first 12 months. Promo code FRESHSTART required at checkout.
Buy at Visible
Recommended For You
COMMENTS (1)
Latest Discussions
by ECPirate37 •
by menooch18 • 2