Twitter blamed for Saudi spy hack of activist tied to Khashoggi

A candlelight vigil in front of the Saudi Embassy to mark the anniversary of the killing of journalist Jamal Khashoggi in Washington, on Oct 2, 2019.
A candlelight vigil in front of the Saudi Embassy to mark the anniversary of the killing of journalist Jamal Khashoggi in Washington, on Oct 2, 2019.PHOTO: REUTERS

SAN FRANCISCO (BLOOMBERG) - A Saudi dissident sued Twitter claiming its failure to tell him about a state-sponsored hack of his account led to government agents discovering his plans for a social media protest with Jamal Khashoggi a few months before the journalist was slain last year.

Omar Abdulaziz claims a Twitter employee, a Saudi national, was recruited by the government to gain access to his account and gather intelligence on him.

Twitter found out about the activities of the employee, Ali Al-Zabarah, fired him in 2015 and later notified a few dozen users of the platform that their accounts "may have been targeted by state-sponsored actors", Abdulaziz said in the complaint.

But Abdulaziz says he wasn't notified. All he got a few months later was an e-mail saying that due to a bug "the email address and phone number linked to your account was viewed by another account", according to the complaint, which included the e-mail from Twitter.

In June 2018, Saudi agents planted malware on Abdulaziz's phone, which allowed them to spy on his activities, he alleges.

At the time, he and Khashoggi, who worked for the Washington Post, were planning the "electronic bees" project, which organised Saudi activists on Twitter to counter the government's so-called "electronic flies" campaign.

Subsequently, the fired Twitter employee was appointed by Saudi Crown Prince Mohammed bin Salman to be the chief executive officer of a multibillion-MISK foundation, according to the complaint.

Abdulaziz said his brothers are still in prison in Saudi Arabia without having been charged and have been tortured to pressure Abdulaziz to stop his activism.

McKinsey & Co., also named as a defendant in the lawsuit, is faulted for writing a report that identified Abdulaziz as one of the top three activists protesting against human rights abuses in Saudi Arabia.

 
 
 

Twitter and McKinsey "have individually invaded plaintiff's privacy and exposed him, his family members, friends and political associates to imprisonment, torture, and even death", Abdulaziz said in the complaint.

Much of the narrative in the complaint was reported a year ago in the New York Times.

Representatives of Twitter and McKinsey didn't immediately respond to requests for comment. McKinsey told the Times last year that the report was an internal document based on publicly available information and wasn't prepared for any government entity. The firm was quoted saying it was "horrified" that the report could have been misused.