Meta has scored a major legal victory in the WhatsApp hack case, as a U.S. jury ordered Israeli spyware maker NSO Group to pay over $167 million in damages for targeting WhatsApp users with illegal surveillance tools.
The ruling stems from a 2019 lawsuit, when Meta (then Facebook) discovered that NSO exploited a zero-day vulnerability to deliver spyware to roughly 1,400 users through WhatsApp. The WhatsApp hack raised global concerns about the abuse of powerful surveillance software, especially when deployed without oversight.
Tuesday’s verdict comes after a judge in December 2024 held NSO legally responsible for the cyberattack. Now, with a jury award of hundreds of millions in punitive damages, Meta is framing the outcome as a defining moment for privacy rights and digital accountability.
“This is an important step forward for privacy and security,” Meta said in a post-verdict statement, adding that the decision is the first courtroom victory against the development and use of illegal spyware that threatens both individuals and companies.
NSO Spyware Targeted WhatsApp Users Worldwide
NSO Group claims its Pegasus spyware is a legitimate product used by governments to track terrorists and criminals. But investigations have revealed how it’s also been deployed by authoritarian regimes to spy on journalists, dissidents, and human rights defenders—many of whom were targeted during the WhatsApp hack.
The Israeli company continues to argue that it isn’t accountable for how clients use its tools. However, the lawsuit exposed that NSO spends tens of millions annually to discover new ways to infect user devices. Meta used that admission to highlight the intentional and repeated nature of the attacks.
In addition to the $167 million in punitive damages, NSO was ordered to pay over $444,000 in compensatory damages to Meta. These funds are intended to cover the legal costs and resources spent investigating the incident. Still, Meta acknowledged that actually collecting these damages may take time, given the potential for appeals.
NSO Vows to Keep Fighting
In response, NSO described the verdict as just one step in a lengthy legal process. The company plans to examine the details and pursue further legal action, including a potential appeal.
NSO defended its business, claiming its tools are used responsibly by authorized government agencies to prevent serious crimes. The firm did not comment on the specific WhatsApp hack incident or acknowledge any misuse of its spyware.
Industry Repercussions and a Clear Message
Meta’s legal action was widely supported by other tech giants concerned about spyware abuse. Apple had also filed a separate case against NSO but withdrew it in 2024 to avoid disclosing sensitive cybersecurity data. Even without Apple’s case moving forward, Meta’s victory sets a powerful precedent.
By winning the WhatsApp hack lawsuit, Meta not only protects its platform but also sends a broader message: companies that build surveillance tools can and will be held accountable, especially when their products are used to violate user privacy.
This case may change how spyware vendors operate going forward. It reinforces the idea that digital platforms have both the right and responsibility to fight back against illegal surveillance targeting their users.
Meta’s statement summed it up clearly: “This verdict is a critical deterrent to the spyware industry and a powerful signal that illegal acts against American companies and the people we serve won’t go unpunished.”
