A media consortium reported on 18 July 2021 a leaked list of potential targets that included at least 300 Indian numbers; a number on the list is not proof of…
Citizen Lab scanned the internet for Pegasus servers and found operators that may be active in 45 countries, India among them. It did not say who targeted whom.
WhatsApp fixed a flaw in May 2019, sued NSO Group in October, and had told CERT-In about 121 Indian users who may have been reached.
A media consortium reported a leaked list of potential targets with at least 300 Indian numbers. A number on the list is not proof the phone was infected.
The IT minister told the Lok Sabha illegal surveillance was not possible in India and called the report an attempt to malign Indian democracy. NSO Group disputed it too.
The Supreme Court appointed a technical committee under Justice R. V. Raveendran and said national security is no automatic bar to review.
The Court said malware was found on five of 29 phones, but it could not be said to be Pegasus, and that the Union had not cooperated.
The Court re-sealed the committee's reports and put them in the custody of its Secretary General.
A bench said portions of the report about individuals could be disclosed and listed the case for 30 July 2025. These were remarks, not a ruling.
A US judge found NSO liable, a jury awarded about $167 million, and in October 2025 the award was cut to about $4 million with an injunction.
No final judgment has been found. The outcome of the 30 July 2025 listing was not reported; check the Supreme Court's case status.
Read the complete story, FAQs and key facts.