A jailed Saudi dissident's sister sues Twitter under RICO, arguing repeated security failures let staff reveal his ID and thousands of others' to Saudi Arabia
Context & Ripple Effects
This lawsuit is the civil sequel to a criminal story that began in 2019, when the DOJ charged two ex-Twitter employees with spying for Saudi Arabia, alleging one accessed 6,000 accounts in a single year to unmask kingdom critics. One of those defendants, Ahmad Abouammo, went on trial in 2022 on charges that his snooping outed dissidents who likely faced torture.
The new twist is the legal theory: rather than suing over a single employee's misconduct, the dissident's sister frames Twitter's repeated security failures as a RICO pattern, seeking to hold the company itself liable for what its insiders did. The stakes are visible in the related coverage of a Saudi court sentencing a man to death over his posts, part of a widening crackdown on dissent.
First-order effects
- Twitter now faces a RICO claim that reframes the conduct in the Abouammo prosecution as a company-wide pattern of negligence, exposing it to damages beyond what individual employee prosecutions could produce.
- Saudi dissidents and critics using the platform — the population allegedly unmasked by insiders — are the direct victims named by the suit, with their identities already compromised.
Second-order effects
- Every major platform with employees who can query user identity data faces pressure to show insider-access controls, because the suit argues repeated failures — not one rogue hire — enabled a foreign intelligence operation.
- The Saudi government's campaign continues regardless of the courtroom outcome, as the death sentence for social media activity shows the demand for unmasking data persists even as its supply becomes legally riskier for platforms.
Third-order effects
- If RICO proves a viable template, state-directed abuse of platform insiders shifts from a criminal matter about individual employees to a civil liability regime for the companies — making access governance a compliance function rather than a security afterthought.
- The arc's later chapter, in which a federal judge dismissed the siblings' related conspiracy case against X, suggests courts may draw a hard line between negligent security and racketeering, leaving the industry's exposure unresolved.
The trend: State-directed surveillance through platform insiders is migrating from prosecutions of individual employees to novel civil theories that put the platforms themselves on trial.