In May 2025, a U.S. federal jury ordered Israeli spyware company NSO Group to pay over $167 million in damages to WhatsApp for a 2019 cyberattack that compromised more than 1,400 users. The jury awarded $167.25 million in punitive damages and $444,719 in compensatory damages, marking a significant legal victory for WhatsApp and its parent company, Meta Platforms. ([arstechnica.com](https://arstechnica.com/security/2025/05/jury-orders-nso-to-pay-167-million-for-hacking-whatsapp-users/?utm_source=openai))
The lawsuit, initiated in 2019, accused NSO Group of exploiting a vulnerability in WhatsApp’s video calling feature to deploy its Pegasus spyware. This sophisticated malware enabled unauthorized access to users’ devices, allowing the extraction of sensitive data such as messages, contacts, and location information. The targets included journalists, human rights activists, and diplomats across various countries. ([arstechnica.com](https://arstechnica.com/security/2025/05/jury-orders-nso-to-pay-167-million-for-hacking-whatsapp-users/?utm_source=openai))
NSO Group has consistently maintained that its technology is designed to assist governments in combating serious crimes and terrorism. However, evidence presented during the trial indicated that Pegasus was used to surveil individuals without their knowledge or consent, raising significant concerns about privacy violations and the misuse of surveillance tools. ([arstechnica.com](https://arstechnica.com/security/2025/05/jury-orders-nso-to-pay-167-million-for-hacking-whatsapp-users/?utm_source=openai))
Following the jury’s decision, NSO Group filed a motion for a new trial or a reduction of the damages awarded, describing the punitive damages as outrageous, blatantly unlawful, and unconstitutionally excessive. The company’s legal team argued that the punitive damages far exceeded the compensatory damages and were intended to bankrupt NSO out of general hostility toward its business activities.
WhatsApp has expressed its intent to continue pursuing legal action against NSO Group. A spokesperson for WhatsApp stated, For the past six years, NSO has tried to avoid accountability at every turn. This is another expected attempt to claim impunity, in response to a strong message from the jury of U.S. citizens deciding to punish NSO for its 2019 illegal attack against an American company and its users.
The case has broader implications for the surveillance technology industry, highlighting the potential for legal accountability and financial repercussions for companies involved in the development and deployment of spyware. It also underscores the ongoing tension between national security interests and individual privacy rights in the digital age.
