WhatsApp Receives $170 Million Judgment Against Israeli Spyware Company NSO Group
In a significant win for privacy advocates and those pushing back against the use of spyware, a U.S. federal court has ordered Israeli spyware company NSO Group to pay WhatsApp and its parent company Meta almost $170 million in damages.
The ruling, which is the latest step in a process that began in 2019, comes after NSO Group's cyber tools were used to hack around 1,400 WhatsApp accounts. The decision marks a major blow to NSO Group, which has become the poster child for the mostly underground spyware market, used increasingly by governments to surveil dissidents, journalists and politicians.
NSO Group's Pegasus software has been at the center of controversy in recent years, with numerous high-profile cases exposing its use by authoritarian regimes around the world. The company's business model relies on selling its tools to governments, which can then use them to spy on individuals and groups deemed a threat to their power.
In September 2024, Apple dropped its suit against NSO Group, citing concerns that its threat-intelligence protections disclosed in the case could be compromised. The decision was seen as a strategic retreat by Apple, but it also left Meta to continue its fight for damages.
Meta's determination to pursue the case has paid off, with the company now standing to collect around $167 million in punitive damages and $440,000 in compensatory damages. However, the prospect of collecting from NSO Group poses significant challenges, particularly given the company's political protection from the Israeli government and its potentially shaky financial footing.
Despite these hurdles, Meta remains optimistic that it can recover the awarded damages. In a statement, the company said it has "a long road ahead to collect awarded damages," but emphasized its commitment to defending individuals against attacks like those carried out by NSO Group.
A Mixed Message from Meta
Meta's decision to pursue the case was motivated in part by a desire to support digital rights organizations that are working to defend people against such attacks. However, the company's meager $16.6 billion in Q1 2025 profit leaves it unable to support these organizations unless it first collects from NSO Group.
This raises questions about Meta's priorities and its willingness to take on powerful and well-connected companies like NSO Group. While the company's commitment to digital rights is admirable, it seems paradoxical that it would tie the success of this collection effort to its ability to support these organizations.
A Long Road Ahead
Whatever the future holds for Meta and NSO Group, one thing is clear: the spyware industry poses a significant threat to global digital security. The use of tools like Pegasus to surveil dissidents, journalists and politicians is a major concern, and it will take sustained efforts from companies like WhatsApp and Meta to defend against these threats.
The ruling in this case marks an important milestone in the fight against spyware abuse, but it is just the beginning. As NSO Group prepares to appeal the decision, it remains to be seen whether Meta will ultimately succeed in collecting the damages owed to it.