In a significant move against invasive spyware, four individuals in the U.K. who were targeted by Pegasus spyware have filed a criminal complaint against its manufacturer, NSO Group, and a now-dissolved private equity firm, Novalpina Capital, which once held a majority stake in the company.
The complaint, supported by the Global Legal Action Network (GLAN), accuses the entities of enabling human rights violations by selling the spyware to regimes with notorious records of political persecution. The surveillance of these activists and journalists took place between 2018 and 2020.
The countries alleged to have been responsible for deploying Pegasus in these attacks include Saudi Arabia, the United Arab Emirates (UAE), and Bahrain. According to the complaint, the perpetrators breached the U.K.’s Computer Misuse Act, which criminalizes unauthorized access to computer systems and data.
The accused parties include NSO Group, its parent company Q Cyber Technologies, and Novalpina Capital, the private equity firm that acquired a majority stake in NSO in 2019 before being liquidated in 2021. The spyware company, notorious for its Pegasus software, claims its technology is sold solely for fighting crime and terrorism. However, evidence suggests it has been used for far more sinister purposes.
Targeted Individuals and Human Rights Violations
The victims include prominent figures:
- The leader of a British foundation critical of the UAE government.
- A journalist who has openly criticized the Saudi monarchy.
- A mosque leader opposing UAE policies.
- An activist highlighting human rights abuses in Bahrain.
Anas Altikriti, one of the victims, emphasized the grave danger posed by such surveillance technologies. “The fact that technological developments are now being used to breach what was only recently regarded as sacrosanct, for the benefit of persecuting political activists, must be of great concern to everyone,” Altikriti stated. He added that if this goes unprosecuted, public and personal freedoms, civil liberties, and human rights will be at serious risk, particularly in nations ruled by autocratic regimes.
Broader Implications of Pegasus Spyware
NSO Group’s Pegasus software has been linked to various human rights abuses globally, including the infamous case of Saudi journalist Jamal Khashoggi, who was spied on before his murder by Saudi agents in 2018. Beyond that, the spyware has reportedly been used to target officials in the British Prime Minister’s Office and the Foreign, Commonwealth, and Development Office. Even prominent figures like Fiona Shackleton, now a member of the House of Lords, were victims when her phone was compromised during her representation of a UAE princess in a high-profile divorce case.
Despite these alarming incidents, the U.K. government has yet to take any formal action against NSO Group for its role in these hacks.
Investigations and Legal Actions
GLAN’s investigation into the hacks was conducted with assistance from Bill Marczak of Citizen Lab, an internationally recognized organization that has documented spyware cases worldwide. The evidence compiled through forensic analysis supports the victims’ claims and has led to additional civil claims being filed against Saudi Arabia, the UAE, and Bahrain through Bindmans LLP, a law firm working in collaboration with GLAN.
This criminal complaint marks another pivotal moment in the ongoing battle against spyware misuse and highlights the urgent need for accountability for companies and states that enable such violations. As the public continues to grapple with the implications of spyware technologies, this case underscores the threat to civil liberties and the urgent call for stronger regulatory measures against such invasive tools.
As of now, the world awaits whether this legal challenge will spur further action against NSO Group and others responsible for enabling these human rights abuses.

