Hacker steals 900GB of data from Cellebrite, the Israeli company that makes products for breaking into mobile phones
Saturday, January 14, 2016 Cellebrite : Petah Tikvah, IL—January 12, 2017—Cellebrite recently experienced … Tim Cushing / Techdirt : Cell Phone Hacking Company Hacked; 900 GB Of Logins, Log Files, And Forensic Evidence Taken Jeff Gamet / The Mac Observer : Cellebrite Hacked, Reaffirming Apple's iOS No-backdoor Stance Chris Baraniuk / BBC : Phone-cracking firm Cellebrite hacked Socialnomics : Hack The Hacker — Biz Hacking Firm Cellebrite Under Attack Christopher Baugh / iPhone in Canada Blog : iPhone Hacking Firm Cellebrite Hacked, 900GB Of Data Stolen Cyrus Farivar / Ars Technica : Hack reveals data company Cellebrite works with everyone from US cops to Russia Mix / The Next Web : Hacker snatches 900GB of data from pay-for-hire phone-hacking agency Pierluigi Paganini / Security Affairs : Israeli mobile phone data extraction company Cellebrite was hacked Charlie Osborne / ZDNet : Mobile hacking firm Cellebrite confirms server breach Inquirer : iPhone hacking outfit Cellebrite gets, er, hacked Eduard Kovacs / SecurityWeek : Mobile Forensics Firm Cellebrite Hacked John Kennedy / Silicon Republic : iPhone cracking firm Cellebrite has been hacked Bogdan Popa / Softpedia News : Hackers Hacked Phone Hacking Company Himanshu Goenka / International Business Times : iPhone Hacker Hacked: Cellebrite, Israeli Firm FBI Hired To Break Into San Bernardino Terrorist's Phone … Joseph Cox / Motherboard : Cellebrite Sold Phone Hacking Tech to Repressive Regimes, Data Suggests Malcolm Owen / AppleInsider : Suspected San Bernardino iPhone penetrators Cellebrite fall victim to server hack Chris Mills / BGR : Notorious iPhone hacking company has its secrets revealed by hack Kieren McCarthy / The Register : iPhone hacking biz Cellebrite hacked Swati Khandelwal / The Hacker News : Phone-Hacking Firm Cellebrite Got Hacked; 900GB Of Data Stolen Thomas Fox-Brewster / Forbes : American Cops' Favorite Phone Hackers Just Got Breached Tweets: Riana Pfefferkorn / @riana_crypto : *clears throat, points to amicus brief she & @granick submitted in #AppleVsFBI about this exact risk, walks away* https://www.wired.com/... https://twitter.com/...
Context & Ripple Effects
The breach lands three weeks after documents showed Cellebrite quietly working with US law enforcement across 20 states to extract data from locked phones — the company was at peak exposure just as its client list went public. Now a hacker has walked off with 900GB of its own internal data: logins, log files, and what appears to be actual forensic evidence from past extractions.
The irony is structural: a firm whose entire business is defeating other people's security could not secure the evidence its products produce. Coverage at the time framed it as vindicating Apple's refusal to build iOS backdoors, and within weeks the stolen material surfaced publicly when hackers released the iOS cracking tools Cellebrite used.
First-order effects
- Law enforcement agencies whose extraction activity is recorded in Cellebrite's logs now face exposure of their own investigative data — the customers bought capability and inherited Cellebrite's breach.
- Cellebrite's core sales pitch — trust us with locked devices — takes a direct credibility hit with the governments and police forces documented as clients.
Second-order effects
- The breach converts Cellebrite's proprietary cracking capability into public property once the stolen tools are dumped, eroding the exclusivity it sells and effectively free-riding jailbreak-style techniques to every attacker.
- The episode feeds the argument Apple and other device makers make against mandated access: the intermediary holding the keys gets breached, so the keys should not exist outside the device.
Third-order effects
- If the pattern holds — an insider later indicted over allegedly stealing NSO Group source code shows Israeli surveillance firms are vulnerable from within as well as without — the exploit-brokerage business model carries a built-in leakage problem that eventually reaches regulators deciding whether such sales should be licensed at all.
- Each breach of a phone-hacking vendor strengthens the default-encryption position of device manufacturers, shifting the policy fight over lawful access toward the vendors' repeated failures rather than abstract privacy arguments.
The trend: Commercial phone-hacking firms are becoming their own worst advertisement: every breach of an exploit vendor hands attackers new capability and hands device makers fresh evidence that backdoor intermediaries cannot be secured.