Intelligence Crisis: Italian Spy Chiefs Questioned in Paragon Cyber Probe
The Paragon investigation continues to gain momentum, as prosecutors in Rome and Naples intensify their questioning of officials from Italy’s intelligence services in an effort to reconstruct the chain of events that led to the alleged unauthorized access to classified information systems. The inquiry now encompasses not only members of the intelligence community but also prominent figures in the media, several of whom appear among the identified victims.
According to Italian sources, prosecutors have questioned the heads of two key agencies — the External Intelligence and Security Agency (AISE) and the Internal Security Agency (AISI). Among those providing testimony were General Giovanni Caravelli, director of AISE, and Bruno Valensise, head of AISI. Both appeared as witnesses, while the case is officially being pursued against “persons unknown.” Investigators are examining possible criminal charges including unauthorized access to computer systems, illegal data collection, and other forms of cyber interference.
General Caravelli has led AISE since May 2020, following a long career in military intelligence, during which he participated in international missions and held senior roles within Italy’s defense establishment. His counterpart, Bruno Valensise, was appointed director of AISI in April 2025, after serving in the Department of Information Security (DIS), where he oversaw legal and strategic coordination among agencies. Valensise holds a doctorate in constitutional law and is regarded as a specialist in the legal frameworks governing national security.
In June 2025, investigators instructed experts from the Cybercrime Police Department to conduct forensic examinations of the mobile devices belonging to seven individuals recognized as victims in the case. Among them were notable figures in Italian and international media — Dagospia founder Roberto D’Agostino, journalist and human rights advocate Eva Vlaardingerbroek, and editors Francesco Cancellato and Ciro Pellegrino. They reported possible compromises of personal data and communications, prompting the initiation of “non-repeatable forensic analyses” — special procedures in which collected digital evidence cannot be replicated or reproduced later.
According to the investigation’s working theory, unknown actors may have gained access to mobile devices and cloud accounts containing correspondence, documents, and data from journalists covering politically and socially sensitive topics. Authorities are exploring whether the goal of the breach was to track journalistic sources or intercept communications between media figures and political entities.
The Paragon case has drawn widespread public attention due to its implications for the relationship between intelligence agencies, private cyber operators, and the press. Italian media report that the name “Paragon” is tied to a company previously linked to the development of digital surveillance and communication analysis tools. Investigators do not rule out the possibility that such technologies were used to facilitate the unlawful intrusion into personal devices.
The prosecutors’ offices in Rome and Naples are working in tandem, sharing evidence and coordinating efforts with the Cybercrime Police. Digital forensics experts and independent consultants have been brought in to trace the origins and transmission routes of the leaked data. The key objective is to identify the source of the breach and determine whether there were connections between the suspects and official security institutions.
No formal charges have yet been filed, but investigators are considering multiple scenarios — from the actions of individual hackers to potential involvement by third parties with access to secure communication channels. Law enforcement officials stress that the investigation is not targeting specific intelligence officers but rather examining the circumstances surrounding a possible breach of law in the context of cyber operations overlapping with official activities.
In Italy, the case has reignited debate over the limits of intelligence operations and the protection of citizens from unauthorized surveillance. Cybersecurity experts note that the Paragon investigation exposes systemic flaws — from gaps in digital oversight to the lack of transparency in the use of surveillance technologies. At the same time, prosecutors have pledged full transparency regarding the protection of participants’ rights and the victims’ access to case materials.
Thus, the Paragon investigation remains one of the most sensitive topics in Italian public life. Its outcome may not only shed light on specific incidents of cyber espionage but also shape the future legal framework governing cybersecurity and intelligence activities in the digital age.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.