Hacking Team
A single attacker dumped 400 gigabytes of the Italian spyware company's emails, customer list, and source code, then walked away and did it again to a different vendor a year later.
Hacking Team was an Italian company that sold a commercial spyware product called Remote Control System to government clients. It marketed itself as serving democracies and operating within Italian export controls. The customer list — which became public on the night of July 5, 2015 — included Sudan, Ethiopia, Saudi Arabia, Bahrain, Kazakhstan, and Mexico, alongside a range of European agencies.
A solo dump
The disclosure took the form of a single torrent containing roughly four hundred gigabytes of internal data: source code, sales spreadsheets, contracts, customer support tickets, and the personal email archives of the company's executives. The dump was advertised from Hacking Team's own Twitter account, which the attacker had also compromised. The account's header image was replaced with the company logo edited to read "HACKED TEAM".
The attacker, a lone individual using the handle Phineas Fisher, later published a detailed step-by-step write-up of the intrusion. It read partly as technical documentation and partly as political manifesto. A year earlier, Phineas Fisher had performed a similar operation against the German spyware vendor Gamma Group, makers of FinFisher.
A regulatory inflection
The Hacking Team dump arrived during ongoing European debate about export controls for so-called intrusion software. The leaked customer list made the policy conversation concrete in a way that ten previous Citizen Lab reports had not, and several Wassenaar Arrangement amendments that followed pointed back at it.
What the chronicle remembers
Hacking Team was the first commercial spyware vendor to have its entire business turned inside out in public. The leak demonstrated, with primary sources, the gap between a vendor's stated customer policy and its actual revenue mix. The same pattern has since recurred with NSO and other descendants of the same market.