Italian prosecutors have officially confirmed that journalist Francesco Cancellato, director of the news website Fanpage, was hacked using Paragon spyware in December 2024. This confirmation comes after a technical report revealed traces of the intrusion on his phone, alongside similar infections targeting activists Giuseppe Caccia and Luca Casarini. The attacks, executed within the same night, suggest a coordinated campaign.
Confirmed Infections and Unclear Origins
While the investigation identified spyware traces on Cancellato’s device, the identity of the perpetrator remains unknown. Despite initial reports from WhatsApp alerting around 90 individuals—including journalists and civil society members—to potential targeting by Paragon Solutions’ spyware, the full extent of the operation is still under scrutiny.
Government Response and Ongoing Scrutiny
The Italian government, led by Prime Minister Giorgia Meloni, has denied involvement in the hacking of Cancellato’s phone, offering only vague assurances of cooperation with investigators. This has prompted criticism from Cancellato himself, who accuses the government of evasion and deception.
Discrepancies in Evidence
The prosecutor’s report found no direct evidence of government operations against Cancellato, despite previous findings by the Italian Parliamentary Committee for the Security of the Republic (COPASIR) confirming lawful targeting of Caccia and Casarini. This discrepancy has raised questions about transparency in official investigations, as noted by Citizen Lab researcher John Scott-Railton.
European Trend of Spyware Abuse
Italy joins a growing list of European nations embroiled in spyware scandals, including Greece, Hungary, Poland, and Spain. The recent sentencing of Intellexa executives in Greece for illegal wiretapping underscores the escalating concerns about government surveillance and privacy violations. Paragon has since canceled its contracts with Italian customers in response to the scandal.
The investigation remains open as authorities seek to identify those responsible for hacking Cancellato’s phone. The case highlights the increasing threat posed by commercial spyware and the lack of accountability in its deployment.
