About 15,000 Mexicans, including politicians, reporters, and activists, as well as 50 people close to Mexico's president appear in leak as potential NSO targets
and priests. It is unbelievable how deep this story goes. https://www.theguardian.com/ ... Seema Chishti / @seemay : *11* numbers used by the former court assistant and her family were put under #Pegasus surveillance. https://twitter.com/... N. Ram / @nramind : Shocking, yes, by normal standards — but should we really be shocked by these revelations about India's authoritarian regime? Who else but the Union government or its agencies could have done this? https://www.theguardian.com/ ... Paras Nath Singh / @parasnsingh95 : Virologist Gagandeep Kang struggled to imagine why she would be deemed a target of surveillance. “I lead a very, very boring life,” she said. https://twitter.com/... Saurabh Todi / @saurabhtodi : This is definitely intriguing. Also, it may be imprudent to assume that all Indians were exclusively targeted by Indian agencies. Many other govts or spy agencies might benefit from obtaining kompromat on many among those named in these lists. This merits deeper investigation. https://twitter.com/...
Context & Ripple Effects
This leak lands at the center of an already-active Pegasus reckoning. Forensic checks on a parallel list of Indian numbers found 7 of 22 phones infected with NSO malware, extending a pattern that began with WhatsApp's 2019 letter naming 121 targeted Indian users. A later investigation traced how Mexico became Pegasus' first client and its most prolific user while publicly promising to stop.
First-order effects
- Roughly 15,000 Mexican politicians, reporters, activists, priests, and 50 people close to President López Obrador now appear as potential targets, putting the sitting government's own circle inside the surveillance net alongside its critics.
- NSO faces renewed exposure of its client list: the leak pairs Mexico's scale with confirmed Indian infections and France's forensic proof of Pegasus on three journalists' phones, which Paris referred to the public prosecutor.
Second-order effects
- Governments implicated by such leaks are pushed toward cover rather than abstinence — India's reported search for Pegasus alternatives at $16M-$120M is explicitly framed as avoiding the 'PR problem,' suggesting demand migrates to less-scrutinized vendors.
- Journalists and civil society gain a verification playbook: the forensic confirmations in India and France turn leaked target lists from allegation into evidence, raising legal exposure for state clients.
Third-order effects
- If the pattern holds — leaks, forensics, prosecutions, then quiet vendor swaps — the commercial spyware market restructures around deniability, with states buying tools whose origins are harder to attribute rather than abandoning the capability.
- Sustained cross-border documentation builds the record that export-control regimes and courts need to treat commercial spyware as a regulated dual-use industry rather than a security service.
The trend: Commercial spyware is being forced out of the shadows by leaked target lists and forensic confirmations, pushing state clients toward less attributable tools instead of away from surveillance.