Researchers from the University of Vienna and SBA Research did something pretty astonishing: they were able to retrieve all existing WhatsApp numbers. In fact, they were able to view and analyze an incredible 3.5 billion WhatsApp profiles, making this one of the largest data collection efforts in history.
According to the researchers, all existing WhatsApp profiles were unprotected on the web and they were able to download all phone numbers and their associated profile data. The researchers informed Meta (owner of WhatsApp) about this leak back in September 2024, but Mark Zuckerberg’s company didn’t respond at first. (Incidentally, Meta is being sued by a former WhatsApp security chief!)
Meta’s initial lack of interest is all the more surprising when you consider everything that emerges from this freely accessible data. For example, we can determine how many WhatsApp users there are per country and how they’re distributed between Android and iOS. India has the most WhatsApp users, followed by Indonesia and Brazil.
The association of WhatsApp accounts to certain countries isn’t as harmless as it may sound. In authoritarian states where the use of WhatsApp is banned and/or monitored—such as North Korea, China, and Myanmar—it can be life-threatening for the owners of certain phone numbers if state surveillance bodies can analyze this data.
Sensitive data freely accessible
Around 30 percent of WhatsApp users have entered detailed information about themselves in their WhatsApp profiles, including sexual orientation and/or political views. Some users have even mentioned their drug habits, while others (who are obviously drug dealers) have mentioned their drug supply and operations. Links to Tinder and OnlyFans posted on WhatsApp were also freely accessible.
Some WhatsApp profiles were also registered using email addresses associated with government and military organizations. Many profiles contained photos in which the users can be clearly identified.
In other words, all of this freely accessible WhatsApp data could be used to synthesize full identities complete with phone numbers, photos, preferences, and email addresses. The researchers also found security problems with some public keys of WhatsApp accounts.
What you can do about this
Based on the findings, we recommend that all WhatsApp users keep their profile information as limited as possible and refrain from posting photos in which they can be identified. Also, don’t provide any links to dating profiles or other sites that could be detrimental to you.
The full research paper—entitled “Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy”—is published for free on GitHub.
A California-based startup has completed a public test flight of its single-seat, all-electric flying car, taking a major step toward consumer-oriented personal aviation. The demonstration, held at the Center for Automotive Research in Northampton County, North Carolina, saw the craft climb to roughly 150 feet and complete a low-altitude circuit. Priced around $190,000, the vehicle is aimed at individual owners rather than air-taxi fleets, and the company’s test pilot went as far as saying, “Everybody’s going to have one.”
The prototype, developed by Pivotal Aero, uses a lightweight electric VTOL layout and reportedly offers about 25 miles of range with speeds near 60 mph. Under current FAA ultralight-style rules, early models may not require a traditional pilot’s license, though flights are restricted to uncongested areas and daylight operation. The company is pitching it as a recreational or short-hop personal aircraft while it pursues broader approvals.
A Glimpse Into the Future of Flying Cars
The test flight arrives at a moment when hype around airborne personal vehicles is increasing again, especially after claims like those surrounding Tesla’s next-generation Roadster. While Tesla’s concept leans more toward futuristic hovering technology than true eVTOL operation, it reflects the same momentum now seen in Pivotal’s real-world prototype.
Still, the practicality of these machines is far from proven. Regulatory oversight, infrastructure gaps, and the limitations of current battery technology are major hurdles, and safety remains a central question. Recent incidents across the emerging eVTOL field, including a recent one in China, show the need for strong certification and reliability standards before any mass rollout.
Pivotal’s prototype suggests that the “personal flying car” niche may grow faster than expected, but only for affluent early adopters. The current price, short range, and restricted-use rules make it more of a specialized recreational aircraft than a mass-market mobility product.
Still, the significance goes beyond hobbyist appeal. As major automakers push into electrification, including Toyota’s new mainstream efforts, the broader transportation landscape is shifting rapidly. Personal electric aircraft represent another branch of that evolution, merging automotive-style usability with simplified aviation.
To move beyond demos, companies like Pivotal must secure FAA certifications, expand battery capacity, boost flight time, and build the infrastructure for charging and maintenance. Urban airspace regulation, noise standards, and emergency procedures will also shape how, and where, these vehicles can fly.
Even with massive hurdles ahead, the successful test flight is a reminder that the line between cars and aircraft is blurring. Whether these machines become common or remain niche, the first wave of all-electric flying cars has officially left the ground.