Federal Courts Will Start Reporting How Often Wiretaps Use Spyware, Starting With 2028 Data

The federal government has been hacking into people's real-time communications since at least 1998. Nobody outside the FBI has ever known how often.

That's finally changing, though not quickly. The Administrative Office of the U.S. Courts told Sen. Ron Wyden's office it will add a new "spyware/hacking" category to its annual Wiretap Report, starting with data collected in 2028 and published in 2029, according to TechCrunch.

The Administrative Office, which coordinates operations across the federal judiciary, has published annual Wiretap Reports for nearly two decades. Those reports already break down how many wiretaps judges authorized each year, whether state or federal courts approved them, which states saw the most activity, and what crimes were under investigation.

What's been missing is any breakdown of wiretaps carried out using hacking tools and spyware, what the government internally calls network investigative techniques, or NITs, per TechCrunch. A spokesperson for the Administrative Office confirmed the change in an email to the outlet, saying "reporting forms and procedures need to be updated to accommodate the new categories" before the data can show up in the report.

What This Actually Covers

This is narrower than it sounds. The new category will only track spyware used to intercept communications in real time, things like Signal messages, WhatsApp calls, texts and emails as they move through a network, according to both TechCrunch and Digital Trends.

It will NOT cover cases where the FBI remotely hacks a phone to pull data already stored on it, like photos, files, or location history. That's classified as a "search" under a different legal process entirely, not a wiretap, and it won't show up in this new reporting category.

Wiretaps require a higher evidentiary bar than a standard search warrant. Judges are supposed to see solid proof of an ongoing crime before signing off on live interception. But once approved, a single wiretap can vacuum up enormous amounts of data. TechCrunch notes one historical wiretap swept up millions of text messages over three months.

The Transparency Push

Wyden has been pushing for this kind of disclosure since 2017, according to The News International, and has introduced the Government Surveillance Transparency Act to force broader reporting requirements on the intelligence community. This wiretap-report change is a smaller, narrower win inside that larger fight, not the full bill.

Eva Galperin of the Electronic Frontier Foundation told TechCrunch the new numbers matter because they replace guesswork with actual data. Her point, as paraphrased by The News International: once real usage numbers are public, it gets a lot harder for the government to claim spyware is deployed surgically if the data shows otherwise.

That's the strongest case for this change, and it's a fair one. Right now the public has no way to independently check whether NIT use is rare and targeted or routine and broad. A number, even an imperfect one, gives researchers, journalists, and Congress something concrete to work with instead of relying entirely on the FBI's word.

The Case for Skepticism

National security and criminal investigators have long argued that publishing granular surveillance statistics can tip off criminal networks to law enforcement capabilities, potentially helping targets evade detection. That's a real operational concern, not a bad-faith one, and it's part of why these numbers stay aggregated at the national level rather than broken down by specific investigation.

There's also the practical gap between announcing a policy and delivering it. The government said this week it's changing course, but the first real numbers won't appear until the 2029 report covering 2028. That's a three-year runway for a bureaucratic form update. Taxpayers and privacy advocates alike should be watching whether that timeline slips further.

Apple, for its part, has already been sounding alarms independent of this court reporting change. The company has sent threat notifications to users in 110 countries it believed were targeted by mercenary spyware, part of a broader pattern covering more than 150 countries total, TechCrunch reported. Citizen Lab researcher John Scott-Railton has tracked similar spyware abuse cases globally.

What's Still Unknown

The new wiretap category tells us nothing about state and local law enforcement use of similar tools outside the federal wiretap framework, nothing about the scope of NSA or other intelligence-agency hacking operations, and nothing about the device-search side of spyware use that falls outside wiretap law entirely.

Congress could close some of those gaps through Wyden's broader transparency bill, but that legislation has not passed. Until the 2029 report actually publishes real numbers, this remains a promised change, not a delivered one.