A landmark lawsuit has been filed in Greece against the makers of the Predator spyware, with victims seeking €8 million in damages over alleged illegal surveillance. The case, brought by politicians, journalists, and civil society figures who claim their devices were compromised, marks one of the most significant legal challenges yet to the commercial spyware industry.
The Predator software, developed by the Athens-based firm Cytrox, has been linked to surveillance campaigns across Europe and the Middle East. Those bringing the suit argue that the company knowingly sold hacking tools that enabled governments to unlawfully monitor critics, opposition figures, and activists. The lawsuit alleges violations of Greek privacy laws and European data protection rules under the GDPR.
The legal action coincides with intensified pressure on EU institutions to introduce stricter oversight of spyware exports and use. Rights groups are calling for the European Commission to close loopholes that allow surveillance technology to be sold to regimes with poor human rights records. The European Parliament has already launched an inquiry into the use of Pegasus and similar spyware, but campaigners say enforcement remains weak.
For UK businesses and consumers, the case underscores the growing risks posed by commercial surveillance tools. The UK Information Commissioner's Office (ICO) has previously warned that spyware can breach UK data protection laws if deployed without consent. Meanwhile, the EU AI Act, which classifies certain surveillance technologies as high-risk, could set a precedent that influences UK regulation post-Brexit, particularly if the UK seeks to maintain data adequacy arrangements with Brussels.
Dr. Eleanor Shaw, a cybersecurity law expert at King's College London, commented: 'This lawsuit sends a clear signal that spyware vendors can no longer operate with impunity. The UK government should take note — without robust enforcement, British citizens and companies remain vulnerable to similar intrusions, whether from domestic actors or foreign states.' The outcome of the Greek case could shape future legal strategies for victims in the UK and elsewhere.