Paragon says it canceled contracts with Italy over government’s refusal to investigate spyware attack on journalist

Spyware maker Paragon accused the Italian government of refusing its assistance in investigating whether a journalist was spied on using Paragon's technology, leading Paragon to terminate contracts with Italian government clients. Paragon claims its offer to determine if its system was used unlawfully was rejected, while Italian government sources state the decision to end the contract was mutual, citing national security concerns that prevented them from sharing confidential data with a foreign company. The accusation follows a report by an Italian parliamentary committee that investigated the spyware scandal and found no evidence of illegal targeting by Italian intelligence agencies, creating a dispute between Paragon and the Italian government.

Analysis

Spyware manufacturer Paragon has publicly accused the Italian government of refusing its assistance in an investigation into the alleged misuse of its technology against a journalist, a refusal Paragon claims led to the termination of its contracts with Italian government clients. Paragon asserts it offered to help determine if its system was used illicitly and in violation of contractual terms. Conversely, Italian government sources indicate the contract termination was mutual and that Paragon's offer was declined due to national security concerns, specifically the risk of exposing confidential data to a foreign private entity and compromising the reputation of Italian intelligence agencies. This public disagreement follows a report by an Italian parliamentary committee, COPASIR, which found no evidence of Italian intelligence agencies, confirmed Paragon customers, unlawfully targeting the journalist in question, Francesco Cancellato. However, COPASIR did confirm lawful targeting of other individuals using Paragon's spyware. The incident, marked by a moderately negative sentiment, highlights significant operational and reputational risks within the private spyware industry and the complex dynamics between vendors and sovereign clients, particularly concerning accountability and oversight. Paragon's public statement represents a rare instance of a spyware provider openly severing ties with a government customer over alleged misuse, though the Italian government's counter-narrative complicates this assertion.

Key Decisions for Investors

• Investors should note the heightened operational, reputational, and contractual risks inherent in the offensive cybersecurity and surveillance technology sector, as demonstrated by Paragon's public dispute and contract termination with the Italian government.
• The incident underscores increasing scrutiny and potential for regulatory intervention or contract instability for firms supplying surveillance tools to government entities, warranting enhanced due diligence on corporate governance, end-use monitoring practices, and dispute resolution mechanisms.
• The Italian government's citation of national security concerns in limiting a foreign private company's access to sensitive systems signals potential challenges for international technology providers in sovereign contracts, a factor to consider for companies with similar cross-border government engagements in sensitive sectors.