Paper 2026/1319 Original: eprint.iacr.org/2026/1319 ↗
A Real-World Law-Enforcement Hack: The Case of Encrochat
Abstract
In 2020, a coordinated law-enforcement effort infiltrated Encrochat, an end-to-end encrypted service provider, exfiltrating historical and real-time data and metadata over months. Encrochat was used extensively by organised crime, and the data from the operation was used as supporting evidence in over 6,000 arrests and related prosecutions across Europe. Encrochat's architecture was vertically integrated, with the company acting as both a device vendor and service provider; Encrochat sold modified Android smartphones with its own PKI and custom applications, including encrypted messaging based on the Signal protocol. In this work, we give the most detailed public account to date of Encrochat's infrastructure and how it was compromised.
Metadata
- Available format(s)
PDF- Category
- Applications
- Publication info
- Preprint.
- History
- 2026-06-25: last updated
- 2026-06-25: published
- Short URL
- https://ia.cr/2026/1319
- License
- https://creativecommons.org/licenses/by-nc/4.0/
BibTeX
@misc{cryptoeprint:2026/1319,
author = {Martin R. Albrecht and Sunoo Park and Michael A. Specter and Douglas Stebila},
title = {A Real-World Law-Enforcement Hack: The Case of Encrochat},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/1319},
year = {2026},
url = {https://eprint.iacr.org/2026/1319}
}