A group of prominent technology companies has stepped forward to support a Salvadoran journalist whose team was targeted with advanced surveillance software. The coalition, which includes industry giants such as Microsoft and Google, is advocating for the right of those affected to seek legal action against the spyware’s developer in the United States.
The case in question involves a lawsuit initiated by journalist Carios Dada and other international plaintiffs against the Israeli firm NSO Group, known for creating the spyware. The lawsuit was previously dismissed by a judge in California, who ruled that the plaintiffs did not have the legal standing to sue in the U.S. due to the case’s foreign nature.
The tech companies have filed a legal brief arguing that their significant investments in cybersecurity and their collaborative efforts with policymakers to combat spyware threats give them a vested interest in ensuring that those who covertly infiltrate their products are held accountable in U.S. courts. They contend that the proliferation of such spyware tools not only erodes consumer trust but also endangers national security.
The plaintiffs are seeking a court order for NSO Group to surrender and delete all data obtained through the hacks and to reveal the clients who acquired the Pegasus spyware used in the attacks.
The focus of the lawsuit is the Salvadoran news outlet El Faro, led by Dada, which was investigating secret government dealings when its staff’s phones were compromised by the Pegasus spyware. This legal challenge is notable as it is the first of its kind brought by journalists against a spyware manufacturer in a U.S. court, highlighting the numerous infections found on El Faro staff members’ phones.
In addition to the lawsuit by El Faro’s staff, NSO Group is also facing legal action from Meta-owned WhatsApp, which claims that many of its users were hacked by Pegasus, a program that was allegedly hosted on servers owned by a major U.S. company without their knowledge.
Supporting the lawsuit’s plaintiffs, several other tech firms have joined in filing the legal brief as the appeal process continues. The brief references a significant investigation that revealed a large number of phone numbers potentially compromised by the spyware, including those of world leaders, government officials, and journalists, raising concerns about the misuse of the spyware beyond its stated purposes.
The brief criticizes the lack of effective measures to prevent the misuse of Pegasus, as the list of targets included individuals unrelated to criminal activities, such as business executives, religious figures, and academics.
Microsoft and Google have publicly expressed their positions on the matter, arguing against granting immunity to companies like NSO Group and emphasizing the need for legal options for victims of cyber espionage, regardless of their location. They highlight the broader societal impact of spyware, which threatens fundamental freedoms and the integrity of democratic processes.
The tech companies maintain that victims of spyware attacks should have the opportunity to pursue legal action in the U.S. under existing laws, even if the attacks occurred outside the country. This stance is crucial in reducing the opportunities for spyware developers to exploit vulnerabilities.
