Jeff Bezos and Mohammad bin Salman
 Jeff Bezos (left, with Mohammad bin Salman) is the most high-profile alleged victim of Saudi Arabia’s cyber-surveillance efforts. Photograph: Anadolu Agency/Getty Images

UN investigators are poised to release a statement about the alleged hacking of Jeff Bezos’s mobile phone after the Guardian revealed details of a forensic analysis that has implicated a WhatsApp account purportedly owned by the crown prince of Saudi Arabia.
The astonishing disclosure prompted a Democratic lawmaker in the US to urgently demand more information about the malware that was allegedly used to infiltrate Bezos’s phone in the 2018 hack of the Amazon founder.
Ron Wyden, a Democratic senator from Oregon, said in a letter to Bezos that the alleged breach of the billionaire’s phone “appears to be part of a growing trend”, citing reports that Saudi Arabia had acquired cyber-hacking capabilities from Hacking Team, based in Italy, and Israel’s NSO Group.
Wyden reacted following a Guardian story that cites sources who said the alleged “hack” occurred after Bezos apparently received a video file sent to him by Mohammed bin Salman’s WhatsApp account. Large amounts of data were allegedly exfiltrated from Bezos’s phone within hours of him receiving the video file.
David Kaye, a UN special rapporteur on freedom of opinion and expression, said in a tweet that he and Agnès Callamard, the special rapporteur on extrajudicial murders, would announce further information about the alleged Bezos hack on Wednesday morning.
Bezos – the owner of the Washington Post – is the most high-profile alleged victim of Saudi Arabia’s cyber-surveillance efforts, but independent experts have concluded that a number of dissidents and activists living outside Saudi Arabia have also been targeted by the kingdom. They include close associates of Jamal Khashoggi, the Washington Post journalist who was murdered in the Saudi consulate in Istanbul in October 2018.
Saudi press officials did not return a request for comment, but the Saudi embassy in Washington said in a tweet in response to the Guardian’s story: “Recent media reports that suggest the kingdom is behind a hacking of Mr Jeff Bezos’s phone are absurd. We call for an investigation on these claims so that we can have all the facts out.”
The fresh allegations about Bezos suggest that even the world’s richest person can fall victim to a cyber-attack, a fact that will likely shine a spotlight on the issue and is likely to cause some consternation on Capitol Hill. Bezos’s head of security, Gavin de Becker, said in an opinion column last March that he had handed the results of his own investigation to law enforcement officials.
The FBI did not return a request for comment on Tuesday.
WhatsApp, the popular messaging service, filed a lawsuit against NSO Group last year alleging that 1,400 users were hacked over a two-week period between April-May 2019 using the Israeli company’s malware. About 100 of those alleged victims were journalists, human rights campaigners, academics and activists who were apparently targeted by NSO’s government clients.
Wyden told the Guardian in December he was examining the possible hacking of US citizens by technology sold by the NSO Group and other foreign surveillance companies, an issue he said raised “serious national security issues”.
NSO has staunchly denied the allegations and has said its technology is intended to be used only to fight crime and terrorism. It has also said its malware technology is not used against US mobile phone numbers, although WhatsApp has suggested in litigation against the company that at least one “202” phone number was targeted using the malware.
Hacking Team could not immediately be reached for comment.
Wyden, an outspoken privacy advocate, asked Bezos to assist him in providing as much technical assistance as possible about the alleged intrusion, saying it would help Congress prevent more cyber-attacks on Americans. Among other details, the senator is seeking the IP addresses of the servers associated with the malware, and any detailed forensic reports that Bezos and his team may have had conducted after the alleged breach. Wyden is also seeking to determine whether the Saudis used an “off-the-shelf” surveillance software, and if so, which one.
It is not clear what precise data was allegedly exfiltrated by Saudi Arabia. Bezos’s own security team has in the past linked allegations that Saudis “accessed” Bezos’s phone to the publication last January of a National Enquirer exposé, which included details about Bezos’s extramarital relationship and intimate text messages.
Bezos’s spokesperson could not immediately be reached for comment. But an attorney for the chief executive told the Guardian on Tuesday that Bezos was cooperating with “investigations”. He declined to comment on the new claims about the crown prince’s alleged personal involvement in the hack.
Both Saudi Arabia and American Media Inc (AMI), which owned the National Enquirer, have denied the kingdom was involved in the publication of the Bezos story.

As 2020 begins…

… we’re asking readers, like you, to make a new year contribution in support of the Guardian’s open, independent journalism. This has been a turbulent decade across the world – protest, populism, mass migration and the escalating climate crisis. The Guardian has been in every corner of the globe, reporting with tenacity, rigour and authority on the most critical events of our lifetimes. At a time when factual information is both scarcer and more essential than ever, we believe that each of us deserves access to accurate reporting with integrity at its heart.
More people than ever before are reading and supporting our journalism, in more than 180 countries around the world. And this is only possible because we made a different choice: to keep our reporting open for all, regardless of where they live or what they can afford to pay.
We have upheld our editorial independence in the face of the disintegration of traditional media – with social platforms giving rise to misinformation, the seemingly unstoppable rise of big tech and independent voices being squashed by commercial ownership. The Guardian’s independence means we can set our own agenda and voice our own opinions. Our journalism is free from commercial and political bias – never influenced by billionaire owners or shareholders. This makes us different. It means we can challenge the powerful without fear and give a voice to those less heard.
None of this would have been attainable without our readers’ generosity – your financial support has meant we can keep investigating, disentangling and interrogating. It has protected our independence, which has never been so critical. We are so grateful.
As we enter a new decade, we need your support so we can keep delivering quality journalism that’s open and independent. And that is here for the long term. Every reader contribution, however big or small, is so valuable. Support The Guardian from as little as $1 – and it only takes a minute.