U.S. courts will now make government use of spyware tools public

U.S. courts will begin publicly disclosing the frequency of government's use of spyware and hacking tools to intercept real-time communications. This change will commence with data collected for the 2028 Wiretap Report, set to be released in 2029. The Administrative Office of the U.S. Courts informed TechCrunch that a new "spyware/hacking" category will be introduced, encompassing wiretaps conducted via hacking tools and spyware, referred to as network investigative techniques (NITs) by federal authorities.

Federal agencies have employed hacking techniques and tools like spyware since at least 1998, yet no public data has existed to illustrate their frequency of use. Current Wiretap Reports already disclose annual statistics on court-authorized surveillance, including the type of wiretap utilized and the investigated offenses. Due to privacy concerns, investigators typically need substantial evidence of criminal activity to secure a judge's authorization for a live tap.

The new reporting category will integrate spyware and hacking-based wiretaps into this framework. The Administrative Office mentioned that updating reporting forms and procedures is necessary before the data can be included in the annual reports. The classification is crucial, as the statistics will encompass spyware used to monitor communications like calls and messages, but not instances where authorities remotely hack into a phone to extract pre-existing data, such as photos, files, or location information.

These actions are dealt with under a separate legal process. Senator Ron Wyden, who has advocated for greater transparency surrounding government surveillance, expressed support for the move. He argued that Americans are generally unaware of the diverse methods used by authorities to monitor communications. Privacy advocates maintain that the new statistics could provide valuable evidence lacking in the existing debates.

Eva Galperin of the Electronic Frontier Foundation noted that public reporting figures could facilitate understanding of whether spyware is employed selectively or widely. The issue has gained prominence as spyware detection and warning systems have improved. Apple recently sent threat notifications to users in 110 countries whose devices were believed to have been targeted by mercenary spyware, joining over 150 other countries where the company has issued such alerts.

Apple's notifications advise users to safeguard their devices and recommend enabling Lockdown Mode, designed to deter spyware attacks. John Scott-Railton, a Citizen Lab researcher, emphasized that these alerts could trigger investigations leading to the discovery of additional cases, underscoring why enhanced data on spyware use matters beyond the initial victims.

The U.S. will be the first country to publish such figures, with the first U.S. numbers not expected until 2029. Until then, the extent of government spyware use will remain challenging to quantify. The upcoming reports should ultimately provide lawmakers, privacy advocates, and the public with a clearer understanding of how frequently these potent surveillance tools are authorized.