Corallo v. NSO Group Technologies Limited

7 UNITED STATES DISTRICT COURT 8 NORTHERN DISTRICT OF CALIFORNIA FRANCESCO CORALLO, 10 Case No. 22-cv-05229-RS Plaintiff, v. ORDER RE PENDING MOTIONS NSO GROUP TECHNOLOGIES 13 LIMITED, et al., 14 Defendants.

16 Plaintiff Francesco Corallo is a native of Italy and a naturalized citizen of the Netherlands, who resided in Sint Maarten in the Dutch Caribbean at the time of the events alleged in the complaint in this action. Corallo describes himself as a successful businessman with interests across the Caribbean and in Italy. Defendants NSO Group Technologies Limited and its sole shareholder Q Cyber Technologies Limited (collectively “NSO”) are Israeli companies, who allegedly develop, market, and distribute “highly invasive surveillance technology or spyware and related products and services, including software called Pegasus and a “security exploit” known as FORCEDENTRY.”

24 Corallo owned an Apple iPhone and stored data in an iCloud account. He alleges NSO used the FORCEDENTRY exploit to deploy the Pegasus software on devices of Apple customers on behalf of NSO’s governmental clients, including Italy and the Netherlands. Corallo asserts Apple notified him that his iPhone and iCloud data had been compromised by such “hacking.” In Apple, Inc. NSO has moved to dismiss for lack of personal jurisdiction and on forum non conveniens grounds, and for failure to state a claim. Apple moves to dismiss for failure to state a claim.

4 Corallo’s opposition to NSO’s motion for dismissal for lack of personal jurisdiction relies heavily on WhatsApp Inc. v. NSO Grp. Techs. Ltd., 472 F. Supp. 3d 649 (N.D. Cal. 2020), in which California-based plaintiffs sued NSO for their systems to deploy the Pegasus software to their users’ devices. The WhatsApp court denied NSO’s motion to dismiss for lack of personal jurisdiction. Id. at 678. Corallo, however, has not made a compelling showing that WhatsApp supports specific personal jurisdiction here, where he is not a California resident and few of the considerations discussed in WhatsApp apply.

11 Even assuming specific personal jurisdiction over NSO might exist on the facts of this case, the doctrine of forum non conveniens may compel dismissal. NSO did not originally move for dismissal on forum non conveniens grounds in the WhatsApp case. In September of this year, however, NSO brought such a motion contending “recent events” support a conclusion that claims relating NSO’s deployment of Pegasus cannot be litigated here. That motion is presently set to be heard on November 9, 2023. At least some of the “recent events” presented by NSO in WhatsApp may postdate the forum non conveniens briefing in this case.

18 In the event an order issues in WhatsApp granting the motion to dismiss on forum non conveniens grounds by December 29, 2023, Corallo may file a supplemental brief, within ten days thereafter, not to exceed 15 pages, setting out any arguments he may have as to why this action should not similarly be dismissed on forum non conveniens grounds. Any such brief may include additional argument as to why Corallo contends personal jurisdiction would be appropriate here, absent forum non conveniens issues, notwithstanding the fact that he, unlike the WhatsApp plaintiffs, is not based in California. NSO may then file a supplemental response, also not to exceed 15 pages, within one week thereafter. The matter will then be resubmitted for decision without further briefing or argument, unless otherwise order. The motion to dismiss filed by defendant Apple, Inc. remains submitted. If no ruling is entered on the forum non conveniens motion in WhatsApp, a further order will issue in this case regarding any further briefing that may || be warranted.

3 Corallo previously filed an overlong reply brief simultaneously with motion for leave to || exceed page limits. Without condoning that practice or implying that the additional pages were necessary, the retroactive motion to extend page limits (Dkt. No. 102) is granted. The initial Case Management Conference is continued to January 25, 2024, with a joint statement to be filed one week in advance.

9 || ITISSO ORDERED.

11 Dated: October 17, 2023 a 12 RICHARD SEEBORG 13 Chief United States District Judge

= 17 Z 18 CASE No. 22-cv-05229-RS