Encrypted drug trafficking communications have long frustrated federal investigators, but ICE’s deployment of Paragon’s Graphite spyware changes that equation entirely. The tool can breach Signal and Telegram messages, activate phone cameras remotely, and track targets in real-time. Acting Director Todd Lyons justified the capability as essential for countering “foreign terrorist organizations’ thriving exploitation of encrypted communication platforms.” Congressional Democrats aren’t buying the narrow scope promise.
The $2 million contract tells a story of regulatory gymnastics. ICE signed with Israeli firm Paragon Solutions in September 2024, only to see the Biden administration suspend it a month later under Executive Order 14093, which restricts foreign-controlled spyware purchases. Enter corporate restructuring magic: Miami private equity firm AE Industrial Partners acquired Paragon’s U.S. operations, merged them with Virginia-based REDLattice, and voilà—the foreign control problem disappeared. ICE reactivated the contract August 30, 2025.
Graphite’s capabilities read like a surveillance wish list. The spyware infiltrates smartphones remotely, extracts encrypted data, and turns devices into unwitting recording studios. Think of every dystopian tech thriller you’ve watched—then remember this is your actual government deploying it. Users of encrypted messaging apps believed their communications were private. Graphite makes that assumption dangerously naive.
Representatives Summer Lee, Shontel Brown, and Yassamin Ansari fired back with demands for transparency in October 2025. Their letter questioned ICE’s legal justifications and requested comprehensive target lists. Lee didn’t mince words with TechCrunch: “Instead of answering the serious constitutional and civil rights concerns that we raised, DHS is asking the public to accept vague assurances and fear-based justifications.” She noted that vulnerable communities “deserve more than secrecy and deflection from an agency with a long record of overreach and abuse.”
That track record includes documented surveillance abuses. Between 2016-2019, 26 ICE agents in San Diego faced investigation for database misuse, including tracking humanitarian workers and lawyers assisting migrants. Internationally, Italy’s intelligence committee documented Graphite targeting activists Luca Casarini and Giuseppe Caccia—prompting Paragon to cut off Italian agencies entirely. The pattern suggests mission creep from stated terrorism investigations toward broader political surveillance.
Legal advocacy groups have filed lawsuits seeking full disclosure of ICE’s spyware operations. The normalization of commercial spyware within federal law enforcement likely signals broader adoption across agencies like the FBI and DEA. Your encrypted communications just became significantly less encrypted than you thought.
