IIRC whatsapp’s automatic backups are stored in cloud and unencrypted by default. So it takes only one person in the group chat who has backups enabled (pop up reminds periodically if not) and no password is set (not required, takes effort and will to set) to leak everyone’s messages.