US judiciary to report spyware-enabled wiretap authorizations

The U.S. judiciary will begin publicly reporting how often judges authorize spyware and hacking tools to intercept real-time communications. The new category will first appear in the 2028 Wiretap Report, due for publication in 2029, the Administrative Office of the U.S. Courts told Senator Ron Wyden and confirmed to TechCrunch.

The disclosure will add a “spyware/hacking” category to the annual report’s accounting of wiretap orders. U.S. authorities describe these tools as network investigative techniques, or NITs. The data is intended to show orders allowing the interception of live communications through such tools, rather than provide a general count of government device hacking.

A new category in the Wiretap Report

For nearly two decades, the Administrative Office of the U.S. Courts has issued annual Wiretap Reports covering authorizations by federal and state judges. The reports already distinguish jurisdictions, investigated crime types and forms of interception, including audio, oral and electronic wiretaps.

Electronic wiretaps can capture text messages, emails and other communications while they pass through a provider’s network. The new reporting category will cover spyware or hacking used to intercept communications in real time, such as calls and messages on Signal and WhatsApp.

The Administrative Office said reporting forms and procedures must be updated before the figures can be included. Because the report is assembled from individual forms submitted across the country throughout the year, the revised collection process will precede publication of the first data.

What the figures will not measure

The forthcoming statistic has a defined legal scope. It will not count instances in which authorities remotely access a phone to retrieve stored images, files or location data. That activity is treated as a search rather than a wiretap, and it is outside the new Wiretap Report category.

Wiretaps permit real-time access to calls, messages and other communications. Law enforcement must meet a high evidentiary threshold before a judge authorizes a live interception. Such orders are generally less numerous than search warrants, although a single authorization can collect a substantial volume of communications.

Transparency debate continues

Wyden, who has called for publication of electronic-surveillance data since 2017, said the public remains largely unaware of the ways government agencies conduct surveillance. He welcomed the courts’ decision while urging Congress to pass the Government Surveillance Transparency Act, which he and other lawmakers reintroduced this year.

Eva Galperin, the Electronic Frontier Foundation’s director of cybersecurity, said public figures could make it harder for authorities to deny the use of spyware and could strengthen accountability where use is abusive. Brett Max Kaufman of the American Civil Liberties Union called the change an important, long-overdue step for transparency around government hacking.

For businesses handling sensitive communications, the practical implication is to keep legal and risk assessments precise: the coming reports will illuminate live interception through spyware, but they will not measure the separate authority used to search data stored on a device.