U.S. Jury Slaps NSO Group with $168M Penalty in Landmark WhatsApp Spyware Case
In a decisive moment for global digital rights, an American jury has ordered Israeli cyber-intelligence firm NSO Group to pay nearly $168 million to WhatsApp, concluding a high-stakes legal fight that spanned six years and spotlighted the murky world of state-sponsored surveillance tech.
The case stems from a 2019 lawsuit by WhatsApp’s parent company, Meta, after it uncovered that NSO’s flagship spyware, Pegasus, had been used to covertly compromise the smartphones of approximately 1,400 individuals across 20 countries—including journalists, activists, diplomats, and government officials. Unlike traditional hacking, Pegasus leveraged a “zero-click” flaw, allowing it to silently access messages, calls, emails, and even camera feeds without any user interaction.
On Tuesday, the California jury awarded Meta $444,719 to recoup the cost of securing WhatsApp’s platform and imposed a staggering $167.3 million in punitive damages—aimed at curbing future abuses by surveillance tech vendors.
The judgment followed a prior ruling by Judge Phyllis Hamilton, who determined that NSO had unlawfully breached both U.S. anti-hacking laws and WhatsApp’s user agreements. Meta welcomed the outcome, calling it a “breakthrough for accountability in the surveillance industry” and pledging to donate the awarded funds to groups fighting cyber intrusion and digital repression.
WhatsApp chief Will Cathcart emphasized the broader significance: “This sends a message to spyware manufacturers worldwide—targeting users with unlawful surveillance comes with consequences.”
Testimony during the trial pulled back the curtain on the commercial spyware trade, revealing how NSO allegedly charged government clients millions to deploy Pegasus and continued evolving its tools even after Meta had initiated legal action.
While NSO maintains its software is a vital counterterrorism tool, the company expressed intent to appeal, arguing that the jury wasn’t shown evidence of Pegasus being used to prevent crimes or threats to national security.
Legal scholars see the case as a precedent-setting blow to opaque spyware operations. It also deepens the call for stricter global regulation of digital surveillance technologies—especially those used by governments under the banner of security but with little oversight or transparency.
As scrutiny intensifies around the global spyware ecosystem, this verdict may become a touchstone for future litigation and policy reform.
