The spyware manufacturer Pegasus, NSO Group, is responsible for attacks on 1,400 WhatsApp users.

A court has ruled that NSO Group, the entity responsible for the Pegasus spyware, is guilty in a lawsuit filed by WhatsApp of Meta for attacks targeting approximately 1,400 devices. This legal action was initiated in 2019, and investigations have revealed that Pegasus has been used to hack the phones of groups such as activists, journalists, and government officials.

According to the ruling issued today, NSO Group is liable for violations of the Computer Fraud and Abuse Act, the California Comprehensive Computer Data Access and Fraud Act, and for breach of contract. With this verdict, the trial will proceed solely to determine the amount of damages. The spyware company has defended its position by arguing that Pegasus was operated by clients investigating crimes and national security matters, an argument the judge rejected. This decision could set a precedent for other companies in the same sector.

Will Cathcart, the head of WhatsApp, has emphasized the significance of this ruling, stating that it represents a major victory for privacy. In a post on Threads, he mentioned that his team has spent five years presenting their case because they firmly believe that spyware companies cannot hide behind alleged immunity or evade responsibility for their illegal acts. Cathcart also warned that surveillance companies should be aware that illegal spying will not be tolerated.

NSO Group did not immediately respond to a request for comment.