Meta has been awarded $167 million in punitive damages after a U.S. jury found Israeli surveillance firm NSO Group liable for illegally hacking the WhatsApp accounts of over 1,400 users.
The verdict stems from Meta’s 2019 lawsuit accusing NSO of reverse-engineering WhatsApp to develop and deploy Pegasus spyware, which was used to infiltrate the devices of diplomats, journalists, and activists worldwide. The exploit leveraged WhatsApp’s encrypted messaging service to silently access targets’ communications and data.
In addition to punitive damages, Meta also secured $444,719 in compensatory damages to cover investigation costs, security enhancements, and brand protection efforts. The decision follows a summary judgment granted by U.S. District Judge Phyllis J. Hamilton, confirming that NSO had violated both federal anti-hacking laws and WhatsApp’s terms of service.
Meta hailed the ruling as a landmark moment for digital rights. “This sends a clear message that companies trafficking in spyware cannot operate above the law,” a company spokesperson said. “It exposes how the surveillance-for-hire ecosystem truly operates.”
WhatsApp CEO Will Cathcart previously revealed that NSO’s infrastructure was traced through accounts and servers linked to the group, helping identify the actors behind the attack.
While the judgment is significant, cybersecurity experts caution that NSO’s financial issues may not halt Pegasus’s reach—underscoring the urgent need for stronger global oversight of spyware technologies.
