Paragon Solutions, the surveillance technology firm accused of deploying military-grade spyware against journalists and activists in multiple countries, has severed ties with Italy following revelations of alleged misuse.
According to a report exclusively published by The Guardian, Paragon’s decision to terminate its contract with Italy came after WhatsApp announced that its spyware had been used to target 90 individuals across 24 countries.
Italy’s Alleged Use of Paragon Spyware
As reported by The Guardian, the decision to end the Italy contract followed claims that an Italian investigative journalist and two activists, both critical of Italy’s dealings with Libya, had been targeted. The work of all three individuals has been critical of Italian Prime Minister Giorgia Meloni’s right-wing government.
The Italian government has denied any involvement in the alleged breaches. However, Paragon reportedly suspended its contract with Italy on Friday as a precaution. The company later decided to fully terminate the contract on Wednesday after determining that Italy had violated its terms of service and ethical guidelines, according to an anonymous source who spoke to The Guardian.
Italian Government Response
The Italian government confirmed that WhatsApp had notified them of seven Italian individuals targeted by the spyware, according to Reuters. However, officials claimed they were not provided with names due to privacy concerns.
Prime Minister Meloni’s office called the incident “particularly serious” and ordered the National Cybersecurity Agency to investigate. While the government has denied any involvement, Meloni is expected to face further questioning in parliament.
High-Profile Targets
Among the confirmed victims is Francesco Cancellato, editor-in-chief of Fanpage, an investigative news outlet. Cancellato publicly disclosed last Friday that he had received an alert from WhatsApp, warning him that his phone had likely been compromised by Paragon’s hacking software. His publication had previously exposed young fascists within Meloni’s party, which may have contributed to him being targeted. Ironically, Meloni had criticised Fanpage’s methods of infiltrating her party.
Luca Casarini, the founder of NGO Mediterranea Saving Humans, also received an alert from WhatsApp. Casarini, known for his humanitarian work rescuing migrants in the Mediterranean, has frequently clashed with Italian authorities over migration policies. He told Reuters that his communications had been intercepted in the past but was unsure who was responsible for this latest intrusion.
The Mechanics of the Attack
Paragon’s Graphite spyware can infect mobile devices without requiring any interaction from the target. WhatsApp revealed that those affected had been added to group chats and sent malicious PDFs, which likely infected their phones.
The hacking attempts were first detected in December, with assistance from Citizen Lab, a digital rights research group at the University of Toronto.
International Fallout
The scope of the alleged surveillance extends beyond Italy. WhatsApp informed the Italian government that spyware had also been deployed in several European countries. They include Belgium, Greece, Latvia, Lithuania, Austria, Cyprus, the Czech Republic, Denmark, Germany, the Netherlands, Portugal, Spain, and Sweden.
Meta, WhatsApp’s parent company, has issued a cease-and-desist letter to Paragon and declined to comment on specific cases, including Casarini’s. Meanwhile, Paragon has not publicly confirmed or denied the allegations, maintaining its policy of not discussing client matters.
Paragon’s Shifting Ownership
Paragon was reportedly acquired by AE Industrial Partners, a U.S.-based private investment firm managing $5.6 billion in assets, with a focus on national security. The company has yet to respond to inquiries regarding the allegations.
Notably, Paragon had also signed a $2 million contract with the U.S. Immigration and Customs Enforcement (ICE) under the Biden administration. However, the agreement was reportedly suspended pending a review to ensure compliance with an executive order restricting federal use of spyware. The current status of that contract remains unclear.
A Growing Surveillance Scandal
While Paragon’s move to sever ties with Italy may offer some reassurance, significant questions remain. The full extent of the surveillance campaign, the entities responsible, and the precise objectives behind targeting these individuals are still unknown. With mounting pressure from civil society groups and international bodies, further scrutiny is likely in the coming weeks.
