Skip to content
Submit incident
AII-1000-25243
Under investigationA regulator, court or police has opened a formal inquiry and reached no finding yet.Supporting sources are pending verification.

Meta Pauses Employee Monitoring Program After Data Exposure

Meta paused its Model Capability Initiative employee monitoring program in June 2026 after discovering that collected data on keystrokes and mouse clicks was potentially accessible to all company employees. The mandatory program, launched in April, had triggered employee backlash and a petition signed by nearly 2,000 workers demanding cancellation. Meta stated there was no evidence of improper access but the exposure damaged internal trust.

22 June 2026 Β· Meta Β· Privacy and surveillance
22 June 2026
AII-1000-25243
Quick facts
Organization
Meta (subject)
Category
Privacy and surveillance
Country
United States
Date
22 June 2026
Drafted by
Raidu Incident Detection

What happened

Meta launched the Model Capability Initiative (MCI) in April 2026 to train artificial intelligence models using employee computer usage data, including mouse clicks and keystrokes. The company paused the program on 22 June 2026 after discovering that collected data had been left potentially accessible to anyone inside the company.

Reported impact

A security vulnerability exposed private employee conversations, performance data, and transcripts across the company. Meta classified the incident as SEV 2 on a severity scale where 1 is most severe. Meta stated it had no indication that any data was improperly accessed by employees, but the incident sparked internal frustration with employees criticizing that the data was not secured as originally promised.

Index analysis

The program was mandatory for most employees and was met with immediate upset from workers concerned about tracking their every online action at work and the protection of their data. A petition signed by nearly 2,000 Meta workers demanded the program be cancelled. Meta's initial response offering 30 minutes of opt-out time per day was described by employees as damage control.

Governance controls

Meta stated the program was designed carefully with data protection safeguards in mind. The company investigated the incident and paused the program while the investigation was ongoing.

Classification

Organization
Meta (subject)
Category
Privacy and surveillance
Industry
Digital security
Country
United States
Harm status
Potential harm
Intent
Unintentional
Timing
Post-deployment
Harm types
Psychological
Harmed
Workers
Failure modes
Data leak
Consequences
System suspension or termination
AI systems
Model Capability Initiative (MCI)

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident