Meta Faces Lawsuit Over Alleged Unauthorized Use of User Photos for AI and Face Recognition Systems

Published:

A group of parents and their children from Illinois and California has filed a lawsuit against Meta in federal court in Chicago, alleging that the company unlawfully used their Facebook and Instagram photos to develop an unreleased face-recognition system called NameTag and to train generative AI models, including Emu and Muse Image. The proposed class action claims that Meta violated privacy laws in Illinois and California by extracting biometric information from users’ photos without their consent.

According to reporting by WIRED, the lawsuit highlights that the code for NameTag was embedded in the Meta glasses AI companion app, which has been downloaded over 50 million times. Although the feature was not activated for users, it was designed to convert faces captured by the glasses into biometric signatures, which would then be compared to faceprints stored on users’ phones. The source of these faceprints remains unclear.

The complaint suggests that these faceprints may originate from images on Facebook and Instagram, referencing claims from Meta employees that NameTag could recognize individuals through their Meta connections or public Instagram accounts. Meta has previously stated that it is not creating a central face database but has not clarified whether users would have the option to opt-in to the system.

The lawsuit also addresses Meta’s image-generation systems, asserting that the training of Emu involved large amounts of data from Facebook and Instagram, which allegedly included biometric information from individuals depicted in the images. Muse Image faced backlash earlier this summer for allowing users to generate images based on public Instagram accounts, a feature that was quickly removed.

Meta has responded to the lawsuit, asserting that it is without merit and misrepresents the company’s practices. A spokesperson stated that the company has been transparent about how it uses user information to enhance its AI products and emphasized that no final decisions have been made regarding the rollout of NameTag.

The plaintiffs, including Francisco Alvarez and his son from Illinois, and Jeremy Wahl and his 10-year-old daughter from California, are seeking damages under Illinois’ Biometric Information Privacy Act, which could amount to $5,000 for each intentional violation and $1,000 for each negligent violation. The proposed class could potentially include millions of individuals across the United States whose images were uploaded to Meta’s platforms since September 4, 2021.

Follow Cyber Warriors Middle East for further global cybersecurity developments.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

New BlackX UEFI bootkit exploits Baton Drop vulnerability in targeted APT campaign

In early 2026, researchers identified a new UEFI bootkit, dubbed BlackX, that exploits the Baton Drop vulnerability (CVE-2022-21894) in a targeted APT campaign against...

Mirai botnet operators attempt to exploit PHP2Shell vulnerabilities, no confirmed breaches reported

In a concerning development, operators of the Mirai botnet have begun attempting to exploit critical vulnerabilities in PHP2Shell, following the release of emergency patches...

Capcom warns Middle East players of phishing risks after data breach affecting 11 million accounts

Capcom has reported a significant data breach affecting its online membership service, impacting over 11 million customer accounts globally, including those in the Middle...

eMudhra exits TLS certificate business following major security breach of weak keys

eMudhra, an India-based certificate authority, has announced its exit from the TLS certificate business following a significant security breach involving the issuance of eight...