A recent Atlantic Council report, highlighted in WIRED, reveals that the United States has surged ahead as the world’s leading investor in the commercial spyware industry. In 2024, there were 20 new U.S.-based investors in spyware firms, bringing the total number to 31, outpacing traditional powerhouses like Israel, Italy, and the U.K. Among the U.S. firms involved are major financial players—D.E. Shaw & Co., Millennium Management, and Jane Street—many of which have invested in firms like Cognyte, which are accused of aiding human rights abuses abroad. The report also notes that the spyware market is growing more complex: more vendors, brokers, suppliers, and individuals are being identified, but accountability and transparency are lagging behind.
Sources: Wired, Atlantic Council
Key Takeaways
– U.S. investment in the spyware industry is accelerating fast, making America the top financier globally in the sector.
– Many of these investments involve firms accused of enabling surveillance of journalists, activists, and other vulnerable groups, raising concerns about human rights violations.
– The expanding ecosystem—vendors, resellers, brokers, affiliates—makes oversight harder, demanding stronger regulation and policy tools to ensure ethical constraints are enforced.
In-Depth
Investment flows from the United States into commercial spyware firms have reached new heights, according to an Atlantic Council study that WIRED recently summarized. Over 2024, the number of U.S.-based investors backing spyware technology rose by 20, bringing the U.S. total to 31—more than that of any other country surveyed. This surge underscores how profitable and increasingly normalized investment in surveillance tools has become, despite ongoing ethical and civil liberties concerns. Big players like D.E. Shaw & Co., Millennium Management, and Jane Street figure in these transactions, including investments in companies like Cognyte, which reports indicate have been linked to covert surveillance operations that may infringe upon the rights of journalists and activists overseas.
One of the flashpoints in this debate has been the acquisition of Israeli spyware vendor Paragon Solutions by AE Industrial Partners, a U.S.-based private equity firm. Paragon (now backed by American interests) is the developer of Graphite, a powerful surveillance tool. Its contract with U.S. Immigration and Customs Enforcement (ICE) drew sharp scrutiny: the deal was paused to assess compliance with an executive order restricting the government’s use of foreign-made spyware, but that pause was later lifted. Critics argue that such enforcement lapses weaken the ability of policy to actually constrain misuse. Meanwhile, the market continues to evolve rapidly, with new vendors, resellers, and brokers entering the fray. The growing number of actors makes tracking who funds what—and who might be using what against whom—far more complex.
The crux of the issue is balancing legitimate national security or law enforcement uses of surveillance tools with the potential for abuse. Current U.S. rules under Executive Order 14093 aim to limit governmental misuse, but private investment remains largely unregulated. Because money flows don’t observe borders or purview easily, there’s a growing call among civil society groups, human rights observers, and some policymakers for stronger oversight—not just of vendors, but of their investors, the chains of supply, and the downstream uses of these tools. Without clearer transparency and enforceable guardrails, there is risk not just to privacy, but to the credibility of democratic institutions themselves.