{"id":"GRC-001","notes":"Coded Sep 25 2026. Escalation 5: forensically confirmed infection (Koukakis). Androulakis: targeted (link), infection not confirmed. First Greek case in the database.","country":"Greece","sources":[{"url":"https://www.amnesty.org/en/latest/news/2026/02/greece-spyware-scandal/","citation":"https://www.amnesty.org/en/latest/news/2026/02/greece-spyware-scandal/"},{"url":"https://balkaninsight.com/2026/02/26/greek-court-found-guilty-four-individuals-in-wiretapping-scandal/bi/","citation":"https://balkaninsight.com/2026/02/26/greek-court-found-guilty-four-individuals-in-wiretapping-scandal/bi/"},{"url":"https://ipi.media/greece-executives-of-spyware-firm-used-to-surveil-journalist-thanasis-koukakis-sentenced-to-prison/","citation":"https://ipi.media/greece-executives-of-spyware-firm-used-to-surveil-journalist-thanasis-koukakis-sentenced-to-prison/"},{"url":"https://www.occrp.org/en/news/greek-court-hands-down-maximum-sentences-in-predator-spyware-case-orders-more-prosecutions","citation":"https://www.occrp.org/en/news/greek-court-hands-down-maximum-sentences-in-predator-spyware-case-orders-more-prosecutions"}],"summary":"'Predatorgate': in 2021–22 the phones of journalists, opposition and government politicians and others were targeted with Intellexa's Predator spyware, in several cases alongside legal wiretapping by the National Intelligence Service (EYP). Journalist Thanasis Koukakis learned in March 2022 that his phone had been infected with Predator (2021) and that EYP had wiretapped him; in July 2022 Nikos Androulakis found his phone had been targeted with Predator while he was an MEP. The EYP chief and the Prime Minister's chief of staff and nephew, Grigoris Dimitriadis, resigned in August 2022. On 26 February 2026 an Athens court convicted Intellexa founder Tal Dilian, Sara Hamou, Felix Bitzios and Yiannis Lavranos (Krikel), sentencing them to a combined 126 years.","tactics":[{"code":"TC-21","role":"primary","label":"Surveillance Infrastructure / Spyware Deployment","needs_review":false},{"code":"TC-51","role":"secondary","label":"Direct Intimidation of Journalists and Civic Actors","needs_review":false}],"version":1,"channels":["One-click spyware (Predator links) combined with EYP wiretapping"],"entities":[{"id":1157,"name":"Users of Predator in Greece (procured via Krikel/Intellexa); National Intelligence Service (EYP) wiretaps; state links under investigation","role":"actor","entity_type":"Security Apparatus (suspected); private spyware vendor"},{"id":1158,"name":"Financial journalist Thanasis Koukakis; PASOK-KINAL leader and then MEP Nikos Androulakis; more than 90 politicians (including ministers), journalists, business leaders and senior military officers","role":"target","entity_type":"Individual — Journalist / Politician"}],"date_text":"2021","created_at":"2026-09-25T12:58:49.238426+00:00","escalation":5,"harm_track":"Track 3 — Operational Suppression","narratives":[],"report_ids":[],"signal_ids":[],"updated_at":"2026-09-25T12:58:49.238426+00:00","occurred_on":"2021-01-01","campaign_ids":[],"enabler_type":"","response_ids":["CR-GRC-001"],"trigger_type":"TR-08: Proactive / Ambient","campaign_phase":"","civic_response":"Koukakis and Androulakis went public and took legal action; the European Parliament's PEGA committee investigated. | Outcome: criminal trial from March 2025; convictions of four vendor-linked defendants on 26 February 2026 (Athens), with the court ordering further prosecutions.","date_precision":"year","enabler_status":"","campaigns_served":[],"consequence_category":"Operational Suppression","institutional_consequence":"Data seizure/exposure; Chilling effect; Resignations; Criminal convictions of vendor executives"}