ICE says it bought Paragon s spyware to use in drug trafficking cases
The acting director of U.S. Immigration and Customs Enforcement told lawmakers that the use of Paragon spyware is necessary to counter terrorists’ “thriving exploitation of encrypted communications platforms.”
The acting head of U.S. Immigration and Customs Enforcement told lawmakers that it has bought and used spyware made by Paragon Solutions in drug trafficking cases, according to a letter seen by TechCrunch.
ICE Acting Director Todd Lyons wrote in the letter to three congresspeople that he approved the agency’s criminal investigative unit Homeland Security Investigations (HSI) to use “cutting-edge technological tools” to counter “foreign terrorist organizations’ thriving exploitation of encrypted communication platforms,” in a reference to spyware.
Law enforcement’s inability to access encrypted data has often been cited as a justification for their need to use computer and cellphone spyware for major criminal cases, as it can grab a person’s data directly from their device. Critics and human rights defenders have long pointed to the growing list of journalists, politicians, and members of civil society whose phones have been hacked by governments using commercial spyware.
In the letter, Lyons said ICE’s use of spyware would “comply with constitutional requirements,” and that he “certified that HSI’s operational use of the specific tool does not pose significant security or counterintelligence risks, or significant risks of improper use by a foreign government or foreign person.”
Contact Us
Do you have more information about how ICE is using Paragon’s spyware? From a non-work device, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.
Bloomberg first reported ICE’s letter to lawmakers.
In 2024, ICE signed a contract with U.S.-Israeli spyware maker Paragon Solutions, a deal that was promptly suspended by the Biden administration to ascertain whether it complied with an executive order that restricts U.S. agencies from using spyware that could be used to target Americans abroad or violate human rights.
In September 2025, ICE lifted the block and reactivated the contract. Until now, however, it wasn’t clear if ICE had planned to use Paragon’s spyware.
The spyware maker has been ensnared in a wide-ranging scandal in Italy, where journalists and pro-immigration activists were revealed to have been targeted with Paragon’s spyware Graphite last year. In response, Paragon cut off Italy’s intelligence agencies from using its spyware tools.
When reached for comment, Democrat Rep. Summer Lee, one of the lawmakers who had requested information from ICE, told TechCrunch that the agency is now moving forward “with invasive spyware technology inside the United States.
The lawmaker added, “instead of answering the serious constitutional and civil rights concerns that we raised, DHS is asking the public to accept vague assurances and fear-based justifications.”
“The people most at risk, including immigrants, Black and brown communities, journalists, organizers, and anyone speaking out against government abuse, deserve more than secrecy and deflection from an agency with a long record of overreach and abuse,” said Lee.
Paragon and ICE did not respond to a request for comment and questions from TechCrunch about the agency’s use of spyware.
Lorenzo Franceschi-Bicchierai is a Senior Writer at TechCrunch, where he covers hacking, cybersecurity, surveillance, and privacy.
You can contact or verify outreach from Lorenzo by emailing [email protected], via encrypted message at +1 917 257 1382 on Signal, and @lorenzofb on Keybase/Telegram.
View Bio
Sign in to highlight and annotate this article

Conversation starters
Daily AI Digest
Get the top 5 AI stories delivered to your inbox every morning.
More about
platform
From Desktop to Web: A Guide to Publishing and Embedding Power BI Reports
Power BI is a powerful business intelligence tool that transforms raw data into immersive, interactive visual stories. However, the true value of a report is realized only when it is shared with stakeholders. Publishing is the process of moving your report from the local Power BI Desktop environment to the cloud-based Power BI Service, where it can be managed, shared, and integrated into other platforms like company websites or portals. Step 1: Creating a Workspace A Workspace is a collaborative container in the Power BI Service where you house your reports, dashboards, and datasets. Sign in to the Power BI Service. On the left-hand navigation pane, click on Workspaces. Select Create a workspace (usually at the bottom of the pane). Give your workspace a unique name (e.g., "Sales Analytics

How to Publish a Power BI Report and Embed It on a Website
You have built a Power BI report. The charts look sharp, the DAX measures are doing their job, and the data model is clean. Now what? The report is sitting on your local machine in a .pbix file that nobody else can see or interact with. This article walks you through the final stretch: publishing that report to the Power BI Service and embedding it on a website. We cover two approaches. The first is Publish to web , which makes your report publicly accessible to anyone with the link. The second is the Website or portal method, which requires viewers to sign in and respects your data permissions. Both produce an interactive iframe you drop into your HTML. We will also cover workspace creation, publishing from Desktop, responsive design, URL filtering, and troubleshooting. What you need befo

Building a Decentralized Mesh Network in Rust — Lessons from the Global South
The Problem 2.6 billion people lack reliable internet access. When disasters strike, infrastructure fails, or communities are remote — traditional communication breaks down precisely when coordination is most critical. I'm a cybersecurity student in Nairobi, Kenya. I've seen what happens when communities lose connectivity: families can't check on each other after floods, rescue teams can't coordinate, and activists can't organize safely. So I built GhostWire — a decentralized, censorship-resistant mesh communication platform that works without any central servers. What Is GhostWire? GhostWire is a peer-to-peer encrypted communication platform written in Rust. Instead of connecting to a server, devices connect directly to each other. Messages hop from node to node through whatever path is a
Knowledge Map
Connected Articles — Knowledge Graph
This article is connected to other articles through shared AI topics and tags.
More in Products

From Desktop to Web: A Guide to Publishing and Embedding Power BI Reports
Power BI is a powerful business intelligence tool that transforms raw data into immersive, interactive visual stories. However, the true value of a report is realized only when it is shared with stakeholders. Publishing is the process of moving your report from the local Power BI Desktop environment to the cloud-based Power BI Service, where it can be managed, shared, and integrated into other platforms like company websites or portals. Step 1: Creating a Workspace A Workspace is a collaborative container in the Power BI Service where you house your reports, dashboards, and datasets. Sign in to the Power BI Service. On the left-hand navigation pane, click on Workspaces. Select Create a workspace (usually at the bottom of the pane). Give your workspace a unique name (e.g., "Sales Analytics

How to Publish a Power BI Report and Embed It on a Website
You have built a Power BI report. The charts look sharp, the DAX measures are doing their job, and the data model is clean. Now what? The report is sitting on your local machine in a .pbix file that nobody else can see or interact with. This article walks you through the final stretch: publishing that report to the Power BI Service and embedding it on a website. We cover two approaches. The first is Publish to web , which makes your report publicly accessible to anyone with the link. The second is the Website or portal method, which requires viewers to sign in and respects your data permissions. Both produce an interactive iframe you drop into your HTML. We will also cover workspace creation, publishing from Desktop, responsive design, URL filtering, and troubleshooting. What you need befo

I Connected 12 MCP Servers to Amazon Q. Here's What Broke
👋 Hey there, tech enthusiasts! I'm Sarvar, a Cloud Architect with a passion for transforming complex technological challenges into elegant solutions. With extensive experience spanning Cloud Operations (AWS Azure), Data Operations, Analytics, DevOps, and Generative AI, I've had the privilege of architecting solutions for global enterprises that drive real business impact. Through this article series, I'm excited to share practical insights, best practices, and hands-on experiences from my journey in the tech world. Whether you're a seasoned professional or just starting out, I aim to break down complex concepts into digestible pieces that you can apply in your projects. Let's dive in and explore the fascinating world of cloud technology together! 🚀 Written from experience building AI age

Qodo vs Tabnine: AI Coding Assistants Compared (2026)
Quick Verdict Qodo and Tabnine address genuinely different problems. Qodo is a code quality specialist - its entire platform is built around making PRs better through automated review and test generation. Tabnine is a privacy-first code assistant - its entire platform is built around delivering AI coding help in environments where data sovereignty cannot be compromised. Choose Qodo if: your team needs the deepest available AI PR review, you want automated test generation that proactively closes coverage gaps, you use GitLab or Azure DevOps alongside GitHub, or you want the open-source transparency of PR-Agent as your review foundation. Choose Tabnine if: your team needs AI code completion as a primary feature, your organization requires on-premise or fully air-gapped deployment with battle


Discussion
Sign in to join the discussion
No comments yet — be the first to share your thoughts!