Mass surveillance is the surveillance of the entire or significant population fraction in the order to monitor that group of citizens. The surveillance is often carried out by security services, but may also be carried out by corporations, either on behalf of governments or at their own initiative. Mass surveillance has often been cited as necessary to fight terrorism, to protect national security, to fight child pornography and to protect children. Conversely, mass surveillance has often been criticized for violating privacy rights, limiting civil and political rights. Mass surveillance can collect metadata while specific content of communications remains hidden. The specific content of the communication can be seen using targeted surveillance. Targeted surveillance can bypass encryption and intercept messages before they are encrypted. Spy tools that enable mass and targeted surveillance of electronic communications are sold by many private companies around the world. Hacking Team, FinFisher and NSO Group are the leaders of the private mass surveillance industry. These companies have been criticized because their spy tools are often abused against political opponents, journalists and activist. The aim of this paper is to investigate whether state-sponsored hacking is being used illegally against human righst and privacy. Also, it is necessary to explore how people can protect themselves from mass and targeted surveillance in order to protect digital privacy.