WhatsApp Wins Rs 1,400 Crore in Lawsuit Against NSO Group Over Pegasus Spyware

In a major legal victory, WhatsApp has been awarded $167 million (approximately Rs 1,414.856 crore) in damages after a U.S. jury found Israeli firm NSO Group liable for deploying its controversial Pegasus spyware through the messaging platform. This outcome marks the end of a legal dispute that spanned six years.

Background: Meta's Lawsuit Against NSO Group

In 2019, Meta, the parent company of WhatsApp, filed a lawsuit in the U.S. against NSO Group. The legal action followed WhatsApp's discovery that Pegasus spyware had been used to target more than 1,400 individuals across 20 countries, including prominent journalists and human rights defenders.

Meta described the cyberattack as a "highly sophisticated cyber attack" that allowed malware to breach devices through video calls, even if those calls were not answered.

Court Ruling and Damages Awarded

In December, Judge Phyllis Hamilton of the U.S. District Court for the Northern District of California ruled that NSO Group had violated the U.S. Computer Fraud and Abuse Act, confirming the use of Pegasus to compromise devices running WhatsApp.

After a week-long jury trial, the court awarded:

• $444,719 (around Rs 3 crore) as compensatory damages

• $167,254,000 in punitive damages

WhatsApp’s Reaction

Carl Woog, Vice President at WhatsApp, welcomed the verdict, saying:

“This recent verdict sends a strong message against the illegal practices of the NSO Group targeting American firms and undermining user privacy.”

NSO Group’s Stand and Appeal Plans

Despite the ruling, NSO Group continues to deny wrongdoing. The company argues that its Pegasus spyware cannot operate on U.S. phone numbers and that WhatsApp was never affected.

Gil Lainer of NSO confirmed the group’s intention to challenge the verdict, stating that:

“Their technology is instrumental in preventing serious crimes and terrorism.”

Meta’s Future Plans

Responding to NSO’s stance, Woog announced Meta’s next steps:

"Meta intends to secure the awarded damages and plans to donate a portion to digital rights organizations, while also seeking a court order to halt any future targeting by NSO."

Indian Targets Among Pegasus Victims

In 2019, WhatsApp notified several Indian users about possible Pegasus surveillance. Among those alerted were:

• Bela Bhatia, a human rights activist

• Nihal Singh Rathod, a lawyer associated with the Bhima Koregaon case

Both individuals confirmed receiving WhatsApp alerts indicating that their phones had been under surveillance for at least two weeks before May 2019, using sophisticated spyware tools.

Conclusion 

The U.S. jury’s decision to award $167 million in punitive damages to WhatsApp marks a significant milestone in the global fight for digital privacy and accountability. By holding NSO Group liable for deploying Pegasus spyware, the ruling reinforces the principle that even state-grade surveillance tools cannot operate unchecked, especially when used to violate user rights and target civil society.

The case has also shed light on the alarming capabilities of spyware, which can infiltrate devices without user interaction, raising concerns about global surveillance practices. WhatsApp’s victory is not only legal but symbolic, emphasizing the responsibility of tech companies to defend their platforms and user base.

The inclusion of Indian activists among the victims also underscores the global scope of the spyware’s misuse. As Meta moves forward with plans to support digital rights initiatives and prevent future attacks, the verdict may serve as a warning to entities engaging in cyber intrusions worldwide.