Spyware Makers' Nemesis: Hacker Phineas Fisher Still Uncaught
Original: The hacker who humiliated spyware makers and was never caught
Why This Matters
Phineas Fisher's sustained, technically sophisticated attacks helped expose and dismantle the commercial spyware industry's early infrastructure.
Over the past decade, hacktivist Phineas Fisher hacked spyware firms FinFisher and Hacking Team, leaking 400GB of data and contributing to Hacking Team's eventual collapse. Despite high-profile attacks on multiple targets across several countries, Phineas has never been identified or arrested.
Phineas Fisher first appeared in August 2014 by hacking Gamma Group, makers of the FinFisher spyware, leaking product manuals, mobile spyware code, and a price list via a satirical X account called @GammaGroupPR. A year later, Phineas executed a far more damaging breach against Italian spyware startup Hacking Team, exfiltrating over 400 gigabytes of data — including source code, tens of thousands of internal emails, confidential contracts, and customer lists. The leak fueled journalistic investigations into government surveillance scandals in Ecuador, Mexico, and Panama. Hacking Team CEO David Vincenzetti was eventually forced to sell the company for one euro. Phineas subsequently hacked the Mossos d'Esquadra police union in Catalonia, releasing a 39-minute tutorial video of the attack, and also targeted Turkey's ruling party in solidarity with the Rojava region. Phineas has described themselves as an anarchist and hacktivist, and has published post-mortems framed as leftist manifestos after major hacks. Despite being one of the most publicly active hackers in history — with a recognizable persona and extensive leaked documentation — Phineas Fisher has never been caught, identified, or prosecuted by any law enforcement agency.