In a landmark decision with wide-reaching implications for the cybersecurity and surveillance industries, a U.S. federal jury has awarded WhatsApp $168 million in damages after finding Israeli spyware company NSO Group liable for targeting its users with malicious surveillance software.

The verdict, delivered in a California federal court, marks the conclusion of a high-profile legal battle that began in 2019. WhatsApp, owned by Meta Platforms Inc., accused NSO Group of exploiting a vulnerability in its platform to install Pegasus, a powerful spyware tool, on the devices of over 1,400 users. The targets reportedly included journalists, human rights activists, diplomats, and government officials around the world.

“This judgment sends a clear message: companies that seek to harm users through sophisticated cyberattacks will be held accountable,” said Will Cathcart, Head of WhatsApp, following the court's decision. “We are proud to stand up for the privacy and safety of our users.”

The core of the case centered on allegations that NSO Group bypassed WhatsApp’s security protocols in 2019 by exploiting a flaw in its voice calling feature. Victims allegedly did not even need to answer the call for the spyware to be installed. Once active, Pegasus could access a device's camera, microphone, messages, and location data without detection.

NSO Group, which has repeatedly insisted that its technology is used exclusively by governments to combat terrorism and serious crime, denied wrongdoing. It argued that it should be protected under “sovereign immunity” because it sold its tools only to state actors. However, the court rejected this defense, ruling that NSO is not entitled to immunity as a private entity operating for commercial purposes.

This case has been closely watched by privacy advocates, technology companies, and governments alike. The ruling adds further pressure on NSO Group, which has faced growing scrutiny in recent years. The company has been blacklisted by the U.S. Commerce Department since 2021 for its alleged involvement in human rights abuses.

Legal experts believe this ruling may set a precedent for how courts handle cases involving private surveillance firms and the misuse of commercial spyware. It also opens the door for potential future lawsuits from affected individuals or other tech companies.

While NSO Group has not yet commented on the verdict, its legal team is expected to appeal the decision.

As the digital world grapples with increasing threats from state-sponsored surveillance and the commercial spyware industry, this case highlights the ongoing tension between national security, commercial interests, and individual privacy rights.