NSO Group, the creator of the controversial spyware Pegasus, has been ordered to pay $167.25 million to Meta for breaching the privacy of 1,400 users on WhatsApp. This decision was reached by a federal jury in California, which held the NSO Group accountable for these intrusions last year.
Meta initiated legal action against NSO Group in 2019 after Citizen Lab exposed a vulnerability that allowed the spyware to be installed via a phone call, regardless of whether the call was answered or not. Once installed, Pegasus could activate the user’s camera and microphone, access emails and text messages, and track location data. This breach affected activists, journalists, diplomats, and more. Similarly, Apple has taken legal steps against NSO Group for attacking iPhone users with Pegasus.
Additionally, the jury granted Meta $444,719 in compensatory damages. “The verdict in WhatsApp’s case today marks a significant move towards enhancing privacy and security by securing the first legal victory against the production and use of illegal spyware, which jeopardizes individual privacy and security,” Meta stated. “Requiring NSO, a well-known foreign spyware dealer, to compensate in damages represents a key deterrent against this harmful industry.”
Going forward, Meta will attempt to secure a court order preventing the NSO Group from targeting WhatsApp. It has also published the unofficial transcripts from deposition videos during the trial, and says it will make a donation to digital rights organizations working to protect users from spyware.
NSO Group spokesperson Gil Lainer says the company “will carefully examine the verdict’s details and pursue appropriate legal remedies, including further proceedings and an appeal.”
Update, May 6th: Added information from NSO Group.
