Digital forensics firm Cellebrite has officially suspended its operations in Serbia. The decision follows damning allegations that Serbian police and intelligence agencies utilized the company’s proprietary technology to unlock mobile devices belonging to a journalist and an activist, subsequently installing invasive spyware.
Amnesty International Exposes Digital Surveillance
The suspension comes in the wake of a December 2024 report by Amnesty International. The investigation detailed how Serbian authorities allegedly bypassed device security using Cellebrite’s forensics tools to compromise targeted individuals. Once access was granted, officials reportedly deployed Novispy, an Android-based spyware designed for persistent surveillance.
Cellebrite’s Investigation and Policy Enforcement
In an official response, Cellebrite confirmed it initiated a rigorous internal review immediately following the publication of the Amnesty report. Adhering to its internal ethics and integrity policies, the company concluded that a suspension of services for the involved customers was necessary.
“We found it appropriate to stop the use of our products by the relevant customers at this time,” the company stated. While Cellebrite has not explicitly named the specific government agency involved, the move marks a significant shift in how the company manages its international client base in the face of human rights concerns.
Uncertain Future for Serbian Authorities
Despite the suspension, questions remain regarding the long-term status of the partnership. When pressed for clarification on whether the ban is permanent or if the customer has a pathway to reinstatement, Cellebrite spokesperson Victor Cooper declined to provide further details.
Advocacy for Accountability
Amnesty International has welcomed the move as a vital initial measure. Donncha Ó Cearbhaill, head of the Security Lab at Amnesty, emphasized the need for deeper action. He urged Serbian authorities to launch transparent, impartial investigations into the misuse of surveillance equipment, ensure accountability for those responsible, and implement robust safeguards to protect civil society from future digital abuses.