Among the findings is that the spyware was used to target the smartphones of both the wife and the fiancee of murdered Saudi columnist Jamal Khashoggi. Their phone numbers appeared on a list of more than 50,000 numbers, which the consortium said were possible targets for surveillance by governments using Pegasus.

Also on the list are phone numbers of overseas journalists for news organizations, including CNN, the Associated Press, Voice of America, the New York Times, the Wall Street Journal, Bloomberg News, Le Monde in France, the Financial Times and Al Jazeera in Qatar.

“The sort of surveillance being reported is an appalling violation of press freedoms and we strongly condemn it,” said a Bloomberg News spokesperson.

The media consortium, led by the Paris-based not-for-profit Forbidden Stories, said it was revealing evidence extracted from the phones through digital forensic analysis by Amnesty International’s security lab.

Pegasus, sold to select governments and law enforcement agencies, can hack into mobile phones through a link and secretly record emails, calls and text messages. In some cases, it can activate itself without the victim clicking on the link, the Post said. It’s unknown how many of the phones on the list were targeted or surveilled, the Post said.

Read More: New Database Ties NSO Group to Improper Spying and Violence

In response to the consortium, NSO denied that its technology was used against Khashoggi and said the investigation contained flawed assumptions and factual errors.

Last month, NSO Group published its first annual “Transparency and Responsibility Report,” which said its products have been used by states to thwart major terrorist attacks and dismantle drug trafficking rings.

More findings from the investigation will be rolled out in the next three days, the Post said.