The Cybernews report on the leaked WhatsApp dataset reveals far more than a one-off dump: it documents structured phone numbers and metadata now weaponized in precision phishing campaigns against ordinary users. This directly aligns with patterns seen in the 2021 Facebook/Instagram scrape of 533 million records, which similarly migrated from dark-web resale into SMS and WhatsApp-based social engineering. What the original coverage misses is the operational maturity of the buyers—likely overlapping with groups tracked in the 2023 Krebs on Security reporting on credential-stuffing syndicates that repurpose contact lists for vishing and account takeover. Meta's continued reliance on phone-number verification as a core trust anchor creates a single point of failure that no amount of end-to-end encryption can mitigate once the directory is public. Downstream risks include targeted disinformation injection into family and community groups, accelerated SIM-swap attempts, and the quiet expansion of data-exploitation pipelines that already feed state-aligned influence operations documented in EU DisinfoLab investigations. The leak is not an anomaly but confirmation that social platforms have industrialized the extraction of identity primitives while under-investing in downstream abuse detection.