A Promised Cooperation That Never Came
When news broke that Italian journalists and civil society activists had been targeted by sophisticated spyware, Israeli-American firm Paragon Solutions made a public commitment: it would help authorities understand what happened. That promise, it now appears, has gone unfulfilled.
According to a new report, Paragon has not responded to Italian authorities' requests for information as part of an ongoing investigation into the attacks. The silence is raising fresh questions about accountability in the murky world of commercial surveillance technology.
Who Is Paragon?
Paragon Solutions is an Israeli-American spyware developer that markets its tools to governments and law enforcement agencies. Like its more infamous competitor NSO Group — the maker of Pegasus — Paragon operates in a sector that sits at the uncomfortable intersection of national security and civil liberties.
The company's flagship product, Graphite, is a spyware platform capable of silently infiltrating smartphones and extracting messages, photos, and other sensitive data. Paragon has long maintained that it only sells to vetted, democratic governments, and that its tools are strictly for lawful interception of criminals and terrorists.
But the Italian case complicates that narrative significantly.
Journalists and Activists in the Crosshairs
The Italian investigation centres on allegations that Paragon's spyware was deployed against journalists and civil society members — exactly the type of targets the company says its technology is not meant for. If accurate, it would represent a serious breach of the safeguards Paragon claims to have in place.
Investigations by digital rights organizations and security researchers have increasingly found that commercial spyware, regardless of who manufactures it, tends to end up used against people who are inconvenient to those in power: reporters, lawyers, human rights defenders, and opposition politicians.
Italy has been a notable flashpoint. The country has seen multiple high-profile spyware controversies in recent years, and its prosecutors have shown a willingness to go after the technology firms involved — not just the clients who ordered the surveillance.
The Accountability Gap
The apparent stonewalling by Paragon highlights a persistent problem: spyware companies face very little legal compulsion to cooperate with foreign investigations. Headquartered outside the investigating jurisdiction, shielded by national security claims, and operating in a regulatory grey zone, these firms can simply go quiet when inconvenient questions arise.
It's a pattern that critics say needs to change. Without cooperation from the companies that build and sell these tools, it becomes nearly impossible for investigators to trace exactly who authorized a specific deployment, which clients received access, and whether proper oversight mechanisms were in place.
The European Union has been moving — slowly — toward stronger regulation of commercial spyware, and the Italian case may add further pressure for binding rules that require vendors to cooperate with judicial inquiries.
What Comes Next
For now, Italian authorities are left trying to piece together the attack chain without the company's help. The investigation is ongoing, and it remains to be seen whether legal or diplomatic pressure can compel Paragon to engage.
What's clear is that the era of spyware companies operating with near-total opacity is facing increasing resistance — from prosecutors, from journalists, and from the targets themselves.
Source: TechCrunch
