NSO Group, the Israeli company behind the notorious Pegasus spyware, has been found liable in a lawsuit brought by Meta's WhatsApp over attacks on approximately 1,400 devices. The ruling, reported by The Record, marks a significant victory for privacy advocates and a blow to the spyware industry.

The lawsuit, originally filed in 2019, alleged that Pegasus had been used to hack phones belonging to various groups, including journalists, activists, and government officials. Investigations have confirmed that the spyware was indeed used to target these individuals, sparking widespread concern about the abuse of surveillance technology.

NSO Group has been held liable for charges of violation of the Computer Fraud and Abuse Act, violation of the California Comprehensive Computer Data Access and Fraud Act, and breach of contract. The company had argued that it wasn't liable because Pegasus was operated by clients investigating crimes and cases of national security, but the judge rejected these arguments. This ruling could establish a precedent for other companies in the same business, making them more accountable for their actions.

WhatsApp's head, Will Cathcart, hailed the ruling as a "huge win for privacy" in a Threads post. "We spent five years presenting our case because we firmly believe that spyware companies could not hide behind immunity or avoid accountability for their unlawful actions. Surveillance companies should be on notice that illegal spying will not be tolerated," he stated.

The implications of this ruling are far-reaching, as it sets a legal precedent for holding spyware companies accountable for their actions. This could lead to increased scrutiny of the surveillance industry, potentially curbing the abuse of powerful spyware tools like Pegasus. The case also highlights the importance of protecting privacy and security in the digital age, where surveillance technology can be easily misused.

NSO Group did not immediately respond to a request for comment on the ruling. The trial will now move forward, focusing solely on the issue of damages. As the case continues to unfold, it will be closely watched by privacy advocates, tech companies, and governments around the world.

In the broader context, this ruling serves as a reminder of the ongoing struggle to balance national security concerns with individual privacy rights. As surveillance technology continues to evolve, it is essential to establish clear legal frameworks and accountability mechanisms to prevent the misuse of these powerful tools.