--- title: The hacker who humiliated spyware makers and was never... description: A deep dive into the decade-long mystery of Phineas Fisher, widely considered the most prolific hacker never caught. Starting in 2014, Phineas hacked FinFisher... canonical: https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The hacker who humiliated spyware makers and was never caught | daily.dev og:description: A deep dive into the decade-long mystery of Phineas Fisher, widely considered the most prolific hacker never caught. Starting in 2014, Phineas hacked FinFisher... og:url: https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh og:image: https://api.daily.dev/og/posts/uxrySlKZH.png og:image:alt: The hacker who humiliated spyware makers and was never caught og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The hacker who humiliated spyware makers and was never caught **[TechCrunch](https://daily.dev/sources/tc)** · 5 min read · 1 upvotes · 0 comments ## Summary A deep dive into the decade-long mystery of Phineas Fisher, widely considered the most prolific hacker never caught. Starting in 2014, Phineas hacked FinFisher and Hacking Team — leaking over 400GB of data including source code, emails, and customer lists — ultimately contributing to Hacking Team's collapse. They also targeted the Catalan police union, Turkey's ruling party, and Cayman National Bank, funding hacktivist causes with stolen money. Despite Italian law enforcement investigations, Phineas' real identity remains unknown. Their origins, motivations, and current whereabouts are shrouded in deliberate misdirection, with the hacker still alive and occasionally in contact with journalists. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Who hacked Hacking Team and what did they leak? An anonymous hacktivist known as Phineas Fisher breached the Italian spyware maker Hacking Team in 2015, stealing more than 400 gigabytes of data including source code, tens of thousands of internal emails, confidential contracts, and customer lists. The leak exposed government surveillance scandals in Ecuador, Mexico, and Panama, and contributed to Hacking Team's eventual collapse, with its CEO forced to sell the company for one euro. _Following how a single breach can unravel a surveillance vendor is easier with security coverage curated on daily.dev._ ### What was Phineas Fisher's first known hack before Hacking Team? Phineas Fisher first surfaced in August 2014 by hacking Gamma Group, maker of the FinFisher spyware, leaking mobile spyware tools, product manuals, and a price list via a Twitter account called @GammaGroupPR. The nickname Phineas Fisher derives from FinFisher. The leak caused limited damage and the company continued operating afterward. _Tracking the early moves behind major spyware breaches helps on daily.dev when following long-running security stories._ ### What was Phineas Fisher's Hacktivist Bug Bounty Program? It was an initiative Phineas Fisher announced in 2019, three years after quietly hacking Cayman National Bank's Isle of Man branch, offering rewards to hacktivists who expose companies' illegal or unethical activities. Cayman National Bank later confirmed being hacked and said it was among several banks targeted; Phineas confirmed hacking multiple banks over the years. _Developers weighing the ethics of offensive security work can follow hacktivism debates on daily.dev._ ## Similar posts on daily.dev - [Ghost hackers: the cybersecurity mystery that nobody has solved](https://daily.dev/posts/ghost-hackers-the-cybersecurity-mystery-that-nobody-has-solved-ecv5u2zlh) · TechCrunch · 30 upvotes · 1 comments - [Five Years, 88,000 Backdoors, and a Pair of Handcuffs: Inside the Global Manhunt That Ended in an Arrest](https://daily.dev/posts/five-years-88-000-backdoors-and-a-pair-of-handcuffs-inside-the-global-manhunt-that-ended-in-an-ar-pmnyy1hya) · Huntress Blog · 0 upvotes · 0 comments - [FBI investigating breach that reportedly hit wiretapping net](https://daily.dev/posts/fbi-investigating-breach-that-reportedly-hit-wiretapping-net-hwrbcwlc6) · The Register · 0 upvotes · 0 comments - [Alleged Scattered Spider hacker extradited to the United States](https://daily.dev/posts/alleged-scattered-spider-hacker-extradited-to-the-united-states-iza9zrlpm) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The hacker who humiliated spyware makers and was never caught","url":"https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh"},"datePublished":"2026-07-25T20:28:22.557Z","dateModified":"2026-09-13T21:55:44.498Z","description":"A deep dive into the decade-long mystery of Phineas Fisher, widely considered the most prolific hacker never caught. Starting in 2014, Phineas hacked FinFisher...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/25f459af991bcbffcb07c2979f4ff137?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/25f459af991bcbffcb07c2979f4ff137?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"The hacker who humiliated spyware makers and was never caught"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/the-hacker-who-humiliated-spyware-makers-and-was-never-caught-uxryslkzh#faq","mainEntity":[{"@type":"Question","name":"Who hacked Hacking Team and what did they leak?","acceptedAnswer":{"@type":"Answer","text":"An anonymous hacktivist known as Phineas Fisher breached the Italian spyware maker Hacking Team in 2015, stealing more than 400 gigabytes of data including source code, tens of thousands of internal emails, confidential contracts, and customer lists. The leak exposed government surveillance scandals in Ecuador, Mexico, and Panama, and contributed to Hacking Team's eventual collapse, with its CEO forced to sell the company for one euro. Following how a single breach can unravel a surveillance vendor is easier with security coverage curated on daily.dev."}},{"@type":"Question","name":"What was Phineas Fisher's first known hack before Hacking Team?","acceptedAnswer":{"@type":"Answer","text":"Phineas Fisher first surfaced in August 2014 by hacking Gamma Group, maker of the FinFisher spyware, leaking mobile spyware tools, product manuals, and a price list via a Twitter account called @GammaGroupPR. The nickname Phineas Fisher derives from FinFisher. The leak caused limited damage and the company continued operating afterward. Tracking the early moves behind major spyware breaches helps on daily.dev when following long-running security stories."}},{"@type":"Question","name":"What was Phineas Fisher's Hacktivist Bug Bounty Program?","acceptedAnswer":{"@type":"Answer","text":"It was an initiative Phineas Fisher announced in 2019, three years after quietly hacking Cayman National Bank's Isle of Man branch, offering rewards to hacktivists who expose companies' illegal or unethical activities. Cayman National Bank later confirmed being hacked and said it was among several banks targeted; Phineas confirmed hacking multiple banks over the years. Developers weighing the ethics of offensive security work can follow hacktivism debates on daily.dev."}}]} ```