Italian journalist Francesco Cancellato received a disturbing notification from WhatsApp last Friday, informing him that his device had been targeted by spyware, allegedly made by Israeli company Paragon Solutions. The message, obtained by TechCrunch, revealed that WhatsApp had interrupted the activities of the spyware company in December and believed Cancellato's device may have received a harmful file, compromising his data, including messages saved on the device.

Cancellato, the director of Italian news website Fanpage.it, is the first target to come forward following WhatsApp's disclosure of a hacking campaign that targeted around 90 people, including journalists and members of civil society worldwide. The hacking campaign is believed to have been carried out using spyware made by Paragon Solutions, which reportedly sells a product to spy on encrypted apps, such as WhatsApp and Signal.

Cancellato expressed feelings of violation and paranoia, questioning why he was targeted and what information the hackers may have accessed. As a journalist, his phone contains sensitive information, including bank passwords, work materials, and personal contacts. He has contacted the authorities and is working with digital rights group Citizen Lab to investigate the incident.

The hacking campaign has sparked concerns over surveillance and privacy, particularly in the context of Western democracies. Cancellato noted that it is "quite strange for a journalist to be spied on in a Western democracy." The incident raises questions about the use of spyware by governments and private companies, and the potential risks to individuals and organizations.

Paragon Solutions has cultivated a reputation for being a responsible surveillance tech vendor, claiming to provide "ethically based tools, teams, and insights to disrupt intractable threats." However, the company's involvement in the hacking campaign has raised eyebrows, and its acquisition by American private equity giant AE Industrial Partners in December 2024 has sparked further scrutiny.

The incident has also drawn attention to the Italian government's potential involvement, with reports suggesting that Italy is a Paragon customer. The Guardian quoted a person close to the company saying Paragon Solutions sold its products to 35 democratic government clients. The Italian government's press office and the head of Prime Minister Giorgia Meloni's press office did not respond to requests for comment.

The hacking campaign has also targeted other individuals, including Sweden-based Libyan activist Husam El Gomati, who was notified by WhatsApp as being one of the targets. El Gomati has been vocal in criticizing Italy's relationship with Libya, particularly an agreement between the two countries to stop immigrants from crossing the Mediterranean.

The incident highlights the need for greater transparency and accountability in the surveillance tech industry, as well as the importance of protecting individuals' privacy and security in the digital age. As Cancellato's case demonstrates, the consequences of spyware attacks can be severe, and it is essential to take proactive measures to prevent such incidents from occurring in the future.