Meta Platforms has secured a major legal victory against the Israeli spyware company NSO Group, with a U.S. federal jury awarding $168 million in damages. The case stemmed from NSO’s exploitation of a vulnerability in WhatsApp’s video calling system to deploy its Pegasus spyware, which affected around 1,400 individuals, including journalists, human rights activists, and diplomats.
The jury awarded Meta $167.25 million in punitive damages and $444,719 in compensatory damages, marking the first time a spyware manufacturer has been held financially responsible for breaching the technical security of smartphone platforms. The lawsuit, filed in 2019, revealed that NSO’s Pegasus software infiltrated WhatsApp’s servers, allowing hackers to secretly access users’ devices. This unauthorized access enabled the spyware to collect sensitive data, such as messages, contacts, and location information.
Meta’s legal team argued that NSO Group violated both the U.S. Computer Fraud and Abuse Act and California’s Comprehensive Computer Data Access and Fraud Act. The court ruling also highlights increasing scrutiny on the spyware industry. Testimonies during the trial disclosed that NSO charged governments up to $7 million to hack 15 devices simultaneously, with international hacking capabilities available at additional costs.
The decision has sparked calls for stronger regulations and more transparency in the surveillance technology sector. In response, Meta pledged to use the awarded funds to support digital rights organizations and bolster efforts to combat unauthorized surveillance. The company is also seeking a court order to prevent further targeting of its platforms by NSO Group.
While NSO Group has announced plans to appeal the verdict, maintaining that its technology is used responsibly by governments to combat crime and terrorism, the ruling sets a legal precedent for holding spyware companies accountable. The outcome may influence future legal actions against similar entities, particularly as the global debate intensifies over the balance between national security and individual privacy rights in the digital age.
