Israeli spyware firm NSO Group has been ordered to pay WhatsApp a staggering $168 million for hacking 1,400 users’ phones in a landmark victory for digital privacy rights that could reshape the global surveillance technology industry.
Key Takeaways
- A Northern California jury awarded WhatsApp $167 million in punitive damages and $445,000 in compensatory damages in a landmark verdict against NSO Group
- NSO’s Pegasus spyware targeted journalists, lawyers, and human rights activists through vulnerabilities in WhatsApp’s system
- The spyware could secretly activate audio, video, and data collection features without user permission or knowledge
- NSO claims its technology helps governments fight terrorism and crime, but the verdict represents a major blow to the surveillance-for-hire industry
- Digital privacy advocates hail the decision as transformative for protecting individual rights against invasive surveillance technologies
Historic Victory Against Surveillance Technology
The verdict against NSO Group marks the first successful legal action against a commercial spyware company in the United States. The case originated from a 2019 lawsuit filed by Meta, WhatsApp’s parent company, after discovering that NSO had exploited vulnerabilities in WhatsApp’s systems to deploy its Pegasus spyware on users’ devices. The Northern California jury’s decision to award $167 million in punitive damages, along with $445,000 in compensatory damages, sends a powerful message about the consequences of unauthorized digital surveillance in America.
“Six years ago, we detected and stopped an attack by the notorious spyware developer NSO against WhatsApp and its users, and today, our court case has made history as the first victory against illegal spyware that threatens the safety and privacy of everyone,” said WhatsApp.
Pegasus: The Invisible Intruder
During the trial, disturbing details about NSO’s Pegasus spyware capabilities came to light. The sophisticated surveillance tool could target both iOS and Android devices, activating cameras and microphones without any indication to the user. Once deployed, Pegasus could monitor all communications, track location data, and access photos and files. Evidence presented in court showed that NSO had invested millions developing methods to covertly install their spyware through various technological means, creating what amounts to an invisible digital monitoring system.
💵 NSO Group to Pay $168 Million to WhatsApp in Landmark Spyware Case
Read more: https://t.co/T1NyFS4ow9
A federal jury in California has ordered Israeli spyware maker NSO Group to pay WhatsApp approximately $168 million in damages, marking a watershed moment in the fight… pic.twitter.com/UqXP8l2lv9
— Cyber Security News (@The_Cyber_News) May 7, 2025
The legal complaint detailed how attackers reverse-engineered WhatsApp’s code to transmit malicious code that could compromise devices. Meta emphasized that these actions represented a severe threat to the entire digital ecosystem. Once installed, the spyware operated with complete stealth, making it virtually impossible for targeted individuals to know they were being monitored, raising serious concerns about unauthorized government surveillance of citizens.
National Security vs. Privacy Rights
NSO Group, founded in 2010 and based in Herzliya, Israel, has consistently defended its technology as a crucial tool in preventing terrorism and serious criminal activity. The company argues that it only sells its products to legitimate government agencies for lawful purposes. However, investigations have linked Pegasus to surveillance operations in countries with poor human rights records, where it has reportedly been used to target journalists, lawyers, and political activists who challenge government authority.
“We firmly believe that our technology plays a critical role in preventing serious crime and terrorism and is deployed responsibly by authorized government agencies,” said NSO vice president for global communication Gil Lainer.
One of the most troubling aspects revealed during the trial was NSO’s claim that it has no control over how its clients use Pegasus after purchase. The judge criticized this stance, noting that selling powerful surveillance tools without adequate safeguards creates significant potential for abuse. This highlights the growing tension between national security interests and fundamental privacy rights in the digital age, a balance that President Trump has consistently advocated should favor American citizens’ constitutional protections.
Future Implications
Digital freedom advocates view this verdict as transformative for the fight against commercial spyware. Some cybersecurity experts suggest NSO Group might face bankruptcy due to this ruling, though they warn the technology itself will likely persist under different names and companies. NSO has already indicated it plans to appeal, with company representatives stating they will “carefully examine the verdict’s details and pursue appropriate legal remedies, including further proceedings and an appeal.”
“The jury’s decision to force NSO to pay damages is a critical deterrent to this malicious industry against their illegal acts aimed at American companies and our users worldwide,” said WhatsApp.
This case establishes an important precedent in the evolving landscape of digital privacy and cybersecurity law. For conservative Americans concerned about government overreach and privacy infringements, this ruling represents a welcome check on technologies that could potentially be used by hostile foreign or domestic entities to undermine constitutional freedoms. While legitimate national security concerns remain valid, this verdict affirms that technology companies must be held accountable when their products are used to violate the privacy rights of American citizens.
