Paragon Spyware Found on Phone of Second Fanpage Journalist, Says Citizen Lab
The spyware scandal involving U.S.-owned surveillance firm Paragon has intensified, with a second journalist in Italy confirmed as a target. Citizen Lab, the digital watchdog based at the University of Toronto, reported that Ciro Pellegrino, a journalist at the Italian outlet Fanpage, was targeted using Paragon’s advanced surveillance software.
This follows earlier revelations that Francesco Cancellato, editor-in-chief of Fanpage, received a warning from WhatsApp in January 2025 indicating that he had also been targeted. Both journalists work for a publication known for critical reporting on Italy’s current administration under Prime Minister Giorgia Meloni.
“The black box of my life, which contains everything from personal and health data to journalistic sources.”
— Ciro Pellegrino, in response to Reuters on learning his phone was targeted
Fanpage has published several investigative reports critical of Meloni’s government, including one that connected her party’s youth wing to far-right extremism. The discovery that multiple Fanpage journalists may have been surveilled using commercial spyware has triggered political and legal scrutiny.
Contract Between Italian Government and Paragon Terminated
Following rising backlash, the Italian government announced it has ended its relationship with Paragon, though both parties offered conflicting explanations. While Paragon claimed it had offered Italian officials a technical means to investigate alleged misuse of its tools, it said those offers were rejected. The Italian government has not commented on this claim or on Citizen Lab’s latest findings.
On June 10, Italy’s parliamentary security committee confirmed the termination of the Paragon contract. This came after public and political pressure, as allegations surfaced that the spyware was used against journalists and migrant rescue activists.
Parliamentary Oversight Under Scrutiny
Earlier this week, a report from the Italian parliament stated that Paragon’s surveillance tools were used by intelligence services, but only in law enforcement operations, such as monitoring migrant sea rescue activists. The report claimed it found no evidence the tools had been used to target Fanpage editor Francesco Cancellato.
However, the confirmation that another Fanpage journalist was targeted has raised concerns over the thoroughness of the investigation.
“It sheds serious doubt on the adequacy of the investigation.”
— Natalia Krapiva, Senior Lawyer, Access Now
The parliamentary panel has left open the possibility of further investigations, though it has not responded to Citizen Lab’s latest findings or media requests.
A European Journalist Also Targeted
In the same report, Citizen Lab revealed that an unnamed European journalist was also hacked using Paragon spyware. No further details were provided, and the lab declined to comment on the journalist’s identity or the context of the attack.
Broader Implications for Enterprise and Media Surveillance
The use of spyware tools like Paragon’s, which are marketed for national security and criminal investigations, is increasingly drawing attention for their deployment against journalists, civil society, and political dissenters.
The Fanpage case marks a significant moment for Europe’s ongoing debate over spyware regulation and government surveillance accountability.
