Leaked documents: Cellebrite couldn't forcibly unlock an iPhone running iOS 17.4 or newer as of April 2024; most of the listed Android devices could be unlocked
Cellebrite, the well-known mobile forensics company, was unable to unlock a sizable chunk of modern iPhones available on the market …
Context & Ripple Effects
Cellebrite’s claimed reach has repeatedly moved with iOS security changes: earlier reporting described its ability to unlock iOS 11 devices and a 2018-era capability sold to New York police for extracting data from high-end phones.
The leaked material marks a narrower point in that cycle, while the listed Android results show that forensic access is not uniform across mobile platforms. Later reporting on Graykey’s partial access to newer iPhones underscores that access can vary by tool, device generation, and software version.
First-order effects
- Cellebrite customers faced a practical limit on forced extraction from iPhones running iOS 17.4 or later, as reflected in the April 2024 documents.
- The contrast with most listed Android devices gives Cellebrite’s users more immediate extraction coverage on Android than on the affected iPhone software versions.
Second-order effects
- Law-enforcement and forensic teams using Cellebrite would need to account for OS version and handset mix when planning device examinations, rather than treating modern phones as a single accessible category.
- The uneven results raise the competitive value of alternative forensic tools and of newly discovered access methods, especially for newer iPhones.
Third-order effects
- The episode reinforces a continuing security arms race in which OS updates can temporarily change the balance between platform protections and commercial forensic vendors.
- If the gap persists, platform-specific forensic access—not merely device ownership—will increasingly shape investigative workflows and the market for extraction tools.
The trend: Mobile forensics is becoming a version-by-version contest as phone makers’ security updates and commercial unlocking tools continually erode and restore access.