Table of Contents
In a decisive victory for digital rights and online privacy, Meta Platforms Inc. has won a $168 million judgment against Israeli surveillance firm NSO Group, culminating a six-year legal battle over the abuse of a WhatsApp vulnerability used to install Pegasus spyware on users’ devices.
The verdict, handed down by a California jury on Tuesday, includes $444,719 in compensatory damages and an unprecedented $167.3 million in punitive damages, underscoring the court’s strong stance against commercial spyware abuse.
A Victory for Digital Accountability
“This verdict is a major step for digital privacy and accountability,” Meta said in an official statement following the ruling.
The company also announced its intention to donate the awarded damages to nonprofits and organizations working to defend digital rights and combat surveillance abuse worldwide.
Background: The WhatsApp Exploit and Pegasus Spyware
The lawsuit stems from a 2019 revelation that NSO exploited a vulnerability in WhatsApp to secretly install Pegasus, a highly invasive spyware capable of turning phones into surveillance tools. The spyware has been linked to the targeting of journalists, activists, political opponents, and civil society figures globally.
NSO has repeatedly come under fire for its client list, which includes countries like Saudi Arabia, Mexico, and Uzbekistan — many of which have been accused of human rights violations and press repression.
Legal Blow: Sovereign Immunity Denied
The case gained significant momentum after the U.S. Supreme Court in 2023 rejected NSO’s claim to sovereign immunity, declaring that private companies selling surveillance tools cannot hide behind their government clients to evade liability.
This ruling paved the way for Meta’s lawsuit to proceed and signaled a broader willingness by the judiciary to scrutinize the murky dealings of the surveillance industry.
Courtroom Drama: Missing Documents and Israeli Involvement
The trial also revealed the extent of NSO’s technical operations, including a 140-person research team with a $50 million annual budget focused on offensive cyber capabilities.
However, the proceedings were repeatedly disrupted by NSO’s failure to comply with discovery orders. At one point, reports surfaced that Israeli authorities had seized critical internal documents, complicating Meta’s efforts to obtain a full evidentiary record.
Tech Industry Pushes Back Against Surveillance
The ruling sets a historic precedent, reinforcing that tech companies can hold spyware vendors accountable under U.S. computer fraud and abuse laws. It also marks a coordinated effort by the tech industry to challenge the commercial spyware ecosystem that has flourished largely in the shadows.
Trump Exempts Smartphones, Electronics from New China Tariffs
Meta’s legal victory is part of a broader trend of pushback, including similar actions by Apple and Microsoft, who have also criticized the role of commercial spyware in undermining user security.
Human Rights Groups Applaud Decision
Privacy and human rights advocates have widely welcomed the ruling. Natalia Krapiva, tech legal counsel at Access Now, described it as a “turning point.”
“This sends a clear message to spyware firms: abuse has consequences,” she said.
NSO Group Weighs Appeal
In response to the verdict, NSO Group issued a statement indicating that it is considering legal options, including an appeal. The company has maintained that its tools are used for lawful purposes by governments to fight terrorism and crime, a claim repeatedly challenged by investigators and civil society groups.
