NextFin News - In a decision that fundamentally challenges the traditional boundaries of international diplomacy and state sovereignty, the London High Court on Monday, January 26, 2026, ordered the Kingdom of Saudi Arabia to pay more than £3 million ($3.8 million) in damages to Ghanem Al-Masarir, a prominent satirist and human rights activist. The ruling follows a multi-year legal battle initiated in 2019, after Al-Masarir alleged that his mobile devices were compromised by the notorious Pegasus spyware and that he was physically assaulted by state agents on British soil. According to the High Court, there was "compelling evidence" that the Saudi government authorized the hacking of Al-Masarir’s iPhones, leading to the exfiltration of private data and causing severe psychiatric harm that effectively ended his career as a digital critic.
The case centers on Al-Masarir, a London-based dissident whose YouTube channels, including "The Ghanem Show," garnered over 345 million views for their sharp critiques of the Saudi leadership. The court found that in 2018, Al-Masarir’s phones were infected with Pegasus, a military-grade surveillance tool developed by the Israeli firm NSO Group. This digital intrusion coincided with a physical attack on Al-Masarir outside Harrods in London, which the court also attributed to Saudi agents. Justice Saini, presiding over the case, rejected Saudi Arabia’s claims of sovereign immunity, asserting that the state’s actions were "grossly intrusive" and lacked any legal justification under the European Convention on Human Rights. The total award of £3,025,662.83 covers personal injury, psychiatric damage, and the costs of the litigation, marking one of the largest successful claims against a foreign state for digital espionage in UK history.
This ruling represents a significant departure from the precedent of sovereign immunity, a legal doctrine that typically shields foreign governments from being sued in domestic courts. Historically, Saudi Arabia has successfully invoked this immunity, most notably in cases related to the 2018 murder of Jamal Khashoggi. However, the London High Court’s decision to pierce this veil suggests that the judiciary is increasingly unwilling to tolerate "transnational repression"—the practice of governments reaching across borders to silence dissidents. By categorizing the use of spyware as a domestic tort (a civil wrong) that resulted in physical and psychiatric injury within the UK, the court has created a jurisdictional bridge that allows victims of state-sponsored hacking to seek redress in the countries where the harm occurred.
The financial implications for the spyware industry are equally profound. NSO Group, the developer of Pegasus, has long maintained that its software is sold exclusively to vetted governments for the purpose of combating terrorism and serious crime. Yet, the Al-Masarir case provides a judicial confirmation of the software’s misuse for political surveillance. According to data from Citizen Lab, Al-Masarir is one of dozens of activists globally whose devices showed traces of Pegasus infection. This court victory provides a blueprint for other victims to pursue civil litigation, potentially exposing both the purchasing states and the technology providers to massive liabilities. The ruling places immense pressure on the U.S. and European regulators to further tighten export controls on dual-use surveillance technologies, as the legal risks of facilitating state-sponsored hacking now carry multi-million dollar price tags.
From a geopolitical perspective, the judgment places U.S. President Trump in a complex position regarding Middle Eastern policy. While the U.S. President has historically prioritized strategic and economic ties with Riyadh, the London ruling reinforces a global trend toward holding the Kingdom accountable for human rights abuses. The decision may embolden similar legal challenges in U.S. courts, where the Foreign Sovereign Immunities Act (FSIA) contains exceptions for personal injury occurring within the United States. If the Saudi government refuses to pay the damages—a likely scenario given its withdrawal from the latter stages of the London proceedings—Al-Masarir’s legal team, led by Malik of Leigh Day, may seek to seize Saudi state assets held within the UK, a move that would trigger a severe diplomatic crisis.
Looking forward, the Al-Masarir case is expected to catalyze a shift in how international law treats cyber-warfare against individuals. As digital surveillance becomes a primary tool of statecraft, the definition of "state act" is being scrutinized. We are likely to see the emergence of a "Digital Tort" framework, where the deployment of malware is treated with the same legal severity as a physical cross-border assassination attempt. For the financial sector, this introduces new ESG (Environmental, Social, and Governance) risks for companies involved in the surveillance supply chain. Investors must now account for the possibility that providing technology to authoritarian regimes could lead to direct legal entanglement and asset seizures in Western jurisdictions. The era of consequence-free digital repression appears to be reaching its judicial limit.
Explore more exclusive insights at nextfin.ai.
