DHS Denies ICE Contract with Spyware Maker Amid Conflicting Records

The Department of Homeland Security (DHS) stated on May 22, 2026, that U.S. Immigration and Customs Enforcement (ICE) has “no relationship” with Paragon Solutions. This assertion directly conflicts with public procurement records that indicate a $2 million contract between ICE and the Israeli spyware maker. These records show the contract was initially entered into in late 2024, paused for review, and then reactivated in August 2025.

The discrepancy raises questions about the accuracy of government procurement records and the clarity of agency statements. The spyware in question, known as Graphite, is reportedly capable of accessing data within encrypted applications and potentially infiltrating phones through text messages. Such capabilities place the contract in a category that typically draws significant scrutiny from civil liberties advocates, lawmakers, and oversight bodies.

Contract Timeline and DHS Statement

Public records suggest a specific timeline for the ICE contract with Paragon Solutions. The agreement was first established in late 2024. Following an initial review, the contract was paused. However, procurement documents later indicated that the contract was reactivated in August 2025. This sequence suggests that an internal review process took place, but the details surrounding the reasons for the review and the criteria used before its reactivation remain unclear.

DHS’s denial, issued on May 22, 2026, uses the present-tense phrase “no relationship.” This statement does not address the earlier contract history, the review period, or the subsequent reactivation detailed in the procurement records. The department did not provide further explanation for the denial or reconcile the conflicting information.

The Graphite Spyware Tool

The Graphite spyware tool is at the center of this controversy due to its reported functionalities. Accounts suggest it can access data from encrypted applications, a feature that raises privacy concerns. Furthermore, some reports indicate that the spyware can infiltrate a user’s phone via text messages. If such capabilities are tied to a government contract, it would naturally attract attention from those concerned with digital privacy and government surveillance practices.

The $2 million figure associated with the contract, along with its non-linear path of entry, pause, and reactivation, highlights the complexities of government procurement, especially concerning sensitive technology. The internal review process, implied by the pause, suggests that the agency considered the contract’s implications, yet its reactivation indicates a decision to proceed.

Questions Arising from the Discrepancy

The DHS denial prompts several questions regarding the nature of the relationship with Paragon Solutions. It is unclear whether the department meant that ICE has no current operational use of Paragon’s technology, or if there is simply no active contractual relationship at this precise moment, despite earlier records. Another possibility is that the procurement entry itself was altered after the reactivation in a way not reflected in the department’s recent statement.

Public contract records are typically the primary source of information for government spending, vendor selection, and agency accountability. When an agency’s statement and official procurement entries diverge, it creates a gap in transparency. If the procurement records were accurate when they were published, the DHS denial appears incomplete. Conversely, if the denial is accurate and complete, the existing procurement trail requires clarification.

Implications for Oversight and Accountability

Procurement records often serve as the initial public indicator that an agency is considering or acquiring surveillance technology. A contract valued at $2 million for software like Graphite carries implications that extend beyond standard office supply purchases. It can influence the types of tools an enforcement agency acquires, how these acquisitions are communicated to the public, and the level of accountability officials provide when questions arise.

The specific descriptions in the available materials, identifying Paragon Solutions as an “Israeli spyware maker” and Graphite as spyware capable of reaching “encrypted app data” and compromising phones via text messages, sharpen the contrast between the DHS denial and the procurement entries. This direct language underscores the importance of reconciling the conflicting accounts for effective oversight.

ICE is central to this discrepancy because the contract records specifically concern this agency, while the denial came from DHS, its parent department. The core issue is whether the DHS statement is intended to negate a past relationship, deny a current one, or dispute the accuracy of the procurement records themselves. The statement issued on May 22, 2026, did not provide the clarity needed to resolve this tension.

The situation leaves the public with two incompatible descriptions of a potential government relationship: the DHS statement asserting “no relationship” and earlier procurement records detailing a $2 million contract with Paragon Solutions, entered in late 2024, paused for review, and reactivated in August 2025. Until these two accounts are reconciled, the exact nature of the connection remains uncertain.

Frequently Asked Questions