NSO Group, a private Israeli firm that sells surveillance technology to governments worldwide, insists that its Pegasus spyware is used only to “investigate terrorism and crime.” Leaked data, however, reveals that the company’s hacking tool “has been used to facilitate human rights violations around the world on a massive scale.”

That’s according to an investigative report published Sunday by the Pegasus Project, a media consortium of more than 80 journalists from 17 news outlets in 10 countries. The collaborative endeavor was coordinated by Forbidden Stories, a Paris-based media nonprofit, with technical assistance from Amnesty International, which conducted “cutting-edge forensic tests” on smartphones to identify traces of the military-grade spyware.

The Guardian, one of the newspapers involved in the analysis, reported that “Pegasus is a malware that infects iPhones and Android devices to enable operators of the tool to extract messages, photos and emails, record calls and secretly activate microphones.” The Washington Post, another partner in the investigation, noted that the tool “can infect phones without a click.”

A massive data leak turned up a list of more than 50,000 phone numbers that, according to the Post, “are concentrated in countries known to engage in surveillance of their citizens and also known to have been clients of … NSO Group, a worldwide leader in the growing and largely unregulated private spyware industry.”

More phone numbers were based in Mexico than any other country, with over 15,000 on the list, “including those belonging to politicians, union representatives, journalists and other government critics,” the Post noted.

As The Guardian reported:

“The phone number of a freelance Mexican reporter, Cecilio Pineda Birto, was found in the list, apparently of interest to a Mexican client in the weeks leading up to his murder, when his killers were able to locate him at a carwash. His phone has never been found so no forensic analysis has been possible to establish whether it was infected.”

Other nations that either had large shares of numbers on the list or were deemed to be potential government clients of NSO include: