Sources: Cellebrite, popular with governments and law enforcement for hacking into devices, is telling potential clients that it can unlock iOS 11 devices
Thomas Fox-Brewster / Forbes :
Context & Ripple Effects
Cellebrite is pitching iOS 11 unlocking to governments and law enforcement at a moment when its own security record is shaky: a hacker made off with 900GB of its data in early 2017 (the 900GB Cellebrite breach), and weeks later researchers published what they said were iOS cracking tools used by Cellebrite. The sales pitch lands just as GrayKey emerges as the rival passcode-breaking product agencies are buying.
The claim also sets up the arc the rest of this coverage traces: leaked documents later showed Cellebrite sold New York City police gear to unlock and extract data from iPhones and high-end Android devices on their own from 2018 onward — but by 2024 another leak showed it could no longer forcibly crack an iPhone running iOS 17.4 or newer.
First-order effects
- Law enforcement agencies shopping for phone-forensics tools gain a marketed option for iOS 11 devices, putting Cellebrite head-to-head with GrayKey for the same agency budgets.
- Suspects' iPhone 11-era devices become newly extractable in pending investigations wherever agencies sign on.
Second-order effects
- Apple's countermeasure cycle tightens: within months, sources reported GrayKey could no longer break passcodes on any iPhone running iOS 12 or above, forcing both vendors to chase each new iOS release.
- Agencies that bought tools for durable capability face recurring repurchase pressure, since each iOS version can silently void the product they own.
Third-order effects
- The pattern across this coverage — capability granted at iOS 11, eroded by iOS 12, gone by iOS 17.4 — points to a structural arms race where Apple's hardening outpaces commercial unlock vendors, pushing law enforcement back toward compelled disclosure or platform-level access requests.
- Vendors like Cellebrite drift toward selling self-service extraction platforms to police departments rather than one-off unlocks, a shift the NYC leak documents directly.
The trend: Commercial phone-unlocking is becoming a perpetual cat-and-mouse market in which each iOS release resets vendor capability and forces agencies into recurring purchases.