Paragon Solutions
| File:Paragon Solutions logo.svg | |
| Industry | Spyware |
|---|---|
| Founded | 2019 |
| Headquarters | , Israel |
Key people | Idan Nurick (CEO) Ehud Barak (co-founder & board member) |
| Products | Graphite |
| Subsidiaries | Paragon Solutions US Inc. |
| Website | paragonsolutions |
Paragon Solutions is an Israeli spyware company.[1] Paragon has tried to market itself as more responsible than other spyware vendors as competitors like NSO Group and Intellexa have been involved in scandals.[2]
History
[edit | edit source]Paragon was founded in 2019 by former commander of Unit 8200 Ehud Schneorson as well as Idan Nurick, Igor Bogudlov, Liad Avraham, and Ehud Barak.[3]
In July 2021, Forbes reported that Battery Ventures had invested between $5 and $10 million in Paragon.[3]
According to the Financial Times, after the discovery of Pegasus on the phones of associates of Jamal Khashoggi, "Paragon declined Israeli government requests to replace Pegasus with Graphite in the Saudi armoury."[4]
In 2023, US president Joe Biden signed Executive Order 14093 which was "seen by experts as targeting NSO, while carving out a space for companies like Paragon to continue selling similar spyware, but only to the closest of US allies."[4] However, the Biden administration subsequently banned the governmental purchase of Paragon software, because of its use for illegal purposes.[5]
In 2024, RED Lattice, a US cybersecurity firm owned by AE Industrial Partners, reportedly acquired Paragon for over half a billion dollars.[6][7]
In 2025, WhatsApp claimed to have disrupted a campaign by Paragon targeting around ninety users, including journalists and members of civil society.[8][9][10]
Graphite
[edit | edit source]According to Citizen Lab, Graphite is a spyware tool sold by Paragon which allows "access to the instant messaging applications on a device, rather than taking complete control of everything on a phone."[1]
Customers
[edit | edit source]Italy
[edit | edit source]Targets of the Italian government have reportedly included Francesco Cancellato, the editor in chief of Fanpage.it, Luca Casarini, the founder of Mediterranea Saving Humans, Husam El Gomati, who has been a vocal critic of Italy and its dealings in Libya, and Father Mattia Ferrari, an Italian priest who had a close relationship with Pope Francis.[11][12][13][14]
In February 2025, Paragon reportedly cut ties with the Italian government after determining that the Italian government had broken "the terms of service and ethical framework it had agreed under its Paragon contract."[15][16]
In June 2025, an Italian parliamentary committee confirmed that the Italian government had used Graphite to hack the smartphones of activists advocating for immigrant rights, including Luca Casarini, Giuseppe Caccia, and David Yambio, while denying that Italy had hacked the smartphone of Francesco Cancellato.[17] Later the same month, Citizen Lab revealed that Ciro Pellegrino, a colleague of Cancellato and the head of the Naples bureau of Fanpage.it, had also been targeted using Graphite, though it was unclear who was behind the targeting.[18]
United States
[edit | edit source]Paragon sells to the United States government.[19] The New York Times reported that the Biden administration allowed the Drug Enforcement Administration to use Graphite.[20] Paragon reportedly hired WestExec Advisors in 2019, as well as Holland & Knight in 2023, to advise it on remaining in the US government's good graces.[4][21]
In March of 2023, President Joe Biden issued Executive Order 14093, banning "operational use by the United States Government of commercial spyware that poses risks to national security or has been misused by foreign actors to enable human rights abuses around the world."[22][23][24]
In 2024, a $2 million contract with US Immigration and Customs Enforcement (ICE)[25] was reportedly paused and placed under compliance review, "to review and verify compliance with Executive Order 14093." According to Wired, experts said that "the level of seriousness with which the US government approaches the compliance review of the Paragon contract will influence international trust in the executive order."[26]
Following the January 2025 inauguration of President Donald Trump, the second Trump administration reversed or circumvented the Biden-era ban, and began acquiring phone-hacking spyware (notably Paragon Solutions' Graphite.[27][28]). In 2025, Trump lifted the pause, allowing ICE to use Paragon's spyware tools.[29]
Late September, 2025, Trump labeled "Antifa" a "domestic terrorist organization," and issued an executive order to all federal agencies to investigate it. ICE acting director, Todd Lyons, said in an interview that ICE will investigate anti-ICE protester networks, "to track the money. We are going to track these ringleaders... and... professional agitators." In October 2025, reporter Rachel Maddow warned that ICE's new surveillance resources -- including their spyware, which can be covertly inserted into anyone's phone from a drone hovering over a protest -- can be used to target and spy on anyone without a warrant, including any political opposition. Former government officials, Democratic politicians, and civil rights advocates, have complained that ICE is now being permitted and empowered to engage in sweeping surveillance and tracking of Americans engaging in Constitutionally permissible political action.[30][31][27][28][25]
Other customers
[edit | edit source]Citizen Lab "identified a subset of suspected Paragon deployments, including in Australia, Canada, Cyprus, Denmark, Israel, and Singapore" and "surfaced potential links between Paragon Solutions and the Canadian Ontario Provincial Police."[1]
See also
[edit | edit source]References
[edit | edit source]- ^ a b c Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ a b Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ a b c Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ "Executive Order 14093," March 27, 2023, posted March 30, 2023, Federal Register retrieved October 28, 2025
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ a b Fernandez, Katerina: "ICE, Spyware, and the Constitution: A Call for Reform in Immigration Enforcement," January 17, 2025, Immigration and Human Rights Law Review, retrieved October 29, 2025
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ a b "Ice obtains access to Israeli-made spyware that can hack phones and encrypted apps,", September 2, 2025, The Guardian, retrieved October 28, 2025
- ^ a b "Trump goes on spyware purchasing blitz to help ICE find people who they claim want to ‘overthrow of the United States Government’," October 17, 2025, The Independent retrieved October 29, 2025
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ "ICE amps up its surveillance powers, targeting immigrants and Antifa,"[dead link] October 17, 2025, Boston Globe, retrieved October 28, 2025; also at Washington Post at: "ICE amps up its surveillance powers..."
- ^ "'We need to watch out': Maddow sounds alarm on ICE surveillance as Trump wields new weapon," October 28, 2025, Rachel Maddow Show, MSNBC, retrieved October 28, 2025