SCOTUS lets Meta's WhatsApp pursue a lawsuit accusing Israel's NSO Group of exploiting a bug to install spyware, allowing surveillance on 1,400 people
The U.S. Supreme Court on Monday let Meta Platforms Inc's (META.O) WhatsApp pursue a lawsuit accusing Israel's NSO Group of exploiting …
Context & Ripple Effects
This Supreme Court decision is the opening gate of a multi-year arc: by letting WhatsApp's suit proceed, SCOTUS cleared the path for every later development in the case — the judge's order that NSO hand over its Pegasus source code, the December 2024 finding that NSO was liable for spying on 1,400 users via a WhatsApp bug, and the nearly $168M jury award Meta won in 2025.
The stakes were never just damages. Discovery forced NSO to expose its code to Meta, and the case ended with a permanent injunction NSO allegedly violated — prompting Meta's 2026 contempt filing. What began as one platform's response to a 2019 attack became the template for holding a commercial spyware vendor accountable in US civil court.
First-order effects
- NSO Group must now litigate in US federal court with full discovery exposure — the same process that later compelled it to surrender its Pegasus and other product code to Meta.
Second-order effects
- With liability established and sanctions on the table, other messaging platforms gain a proven playbook for suing spyware vendors rather than only patching exploits quietly.
Third-order effects
- If the pattern holds — injunctions, damages, and contempt enforcement stacking on top of each other — commercial spyware firms face a structural cost of doing business against US-hosted platforms that no single patch cycle can offset.
The trend: Platform companies are turning US civil litigation into their primary weapon against the commercial spyware industry, converting individual exploits into compounding legal liability.