The public research collection

Targets went public after WhatsApp's notifications and Citizen Lab confirmed Graphite infections. The parliamentary committee COPASIR (5 June 2025) confirmed intelligence use ag…

← All responses
summary
Targets went public after WhatsApp's notifications and Citizen Lab confirmed Graphite infections. The parliamentary committee COPASIR (5 June 2025) confirmed intelligence use against Casarini and Caccia; the agencies suspended and then terminated the Paragon contract, and Paragon cut ties with Italy after the government declined an audit.
country
Italy
date text
05/06/2025
civic actions
Public disclosure by targets; forensic confirmation; parliamentary scrutiny; press investigation.
id
CR-ITA-001
incident id
ITA-001
notes
Added Sep 25 2026. Response type: RT-DOC (+RT-PLT); counters TC-21; escalation stage 5; result: Partial — Graphite no longer used by Italian intelligence; surveillance of the NGO justified, no accountability. (06/2025).
outcome
Spyware contract terminated
responders
Targets Luca Casarini, Beppe Caccia, Francesco Cancellato and Ciro Pellegrino; Citizen Lab (forensics); COPASIR; Paragon
source
https://citizenlab.ca/research/a-first-look-at-paragons-proliferating-spyware-operations/; https://therecord.media/paragon-spyware-maker-cuts-ties-italy-government; https://en.ilsole24ore.com/art/what-is-the-paragon-case-and-what-is-happening-AHhJrvBB

Explore the connections

Read the complete JSON record