Magnet Forensics Inc, a Canadian cybersecurity firm now owned by private equity giant Thoma Bravo, has launched legal action against a former contractor and a Spanish rival organisation, claiming that sensitive information about a previously undisclosed iPhone weakness was improperly shared and subsequently made public. The dispute centers on what security researchers call a zero-day vulnerability—a previously unknown flaw in computer systems that manufacturers and defenders have literally zero days to address before it becomes exploited. In this case, the alleged breach involves flaws discovered in Apple Inc's A12 and A13 chips, which power millions of iPhones worldwide.
The lawsuit, filed on July 7 in the United States District Court for the Northern District of Georgia, names Mario Del Gaudio as the individual respondent and Paradigm Shift Technology SL as the corporate defendant. Both companies operate in the specialised and controversial market for zero-day exploitation tools, which they develop and sell primarily to government agencies, law enforcement bodies, and military organisations for authorised investigation and intelligence purposes. The business model relies entirely on possessing exclusive access to previously unknown vulnerabilities, making the protection of such information paramount to competitive advantage and commercial viability.
According to court documents, Del Gaudio served as an iOS exploit engineer at Magnet Forensics and spent several months developing technical capabilities to exploit the A12 and A13 chip vulnerabilities. The core of Magnet's complaint is that Del Gaudio subsequently became involved with Paradigm Shift Technology and, in June 2025, that organisation published detailed research describing the very same zero-day vulnerabilities on its public blog. This public disclosure created what Magnet describes as irreparable harm to its business interests. Once a vulnerability becomes widely known, manufacturers can develop patches and security updates, rendering the exploit useless to customers who pay substantial sums for exclusive access to tools that work against patched systems.
Magnet Forensics claims that Del Gaudio's alleged actions violated a confidentiality agreement he had signed with the company, thereby breaching contract obligations. The firm has asserted that the public disclosure of the vulnerability specifically alerted Apple to previously unknown weaknesses in its hardware, enabling the technology giant to prioritise remediation efforts and potentially develop patches that would eliminate the technical capability's value for Magnet's customer base. In the digital forensics and cybersecurity industry, where exclusivity and secrecy are currency, such disclosure represents a direct financial injury that cannot be easily calculated or compensated through standard damages.
The significance of this dispute extends beyond the immediate commercial relationship between these firms. Magnet Forensics operates globally, serving more than 6,000 customers across government and private sector organisations spanning 100 countries, according to the lawsuit filing. For law enforcement and intelligence agencies, the ability to unlock iPhones represents a critical investigative tool, allowing access to evidence that would otherwise remain encrypted and inaccessible through conventional means. The loss of exclusive access to proven exploitation techniques potentially affects the investigative capacity of thousands of agencies worldwide.
Thoma Bravo's 2023 acquisition of Magnet Forensics for US$1.3 billion reflected the high valuation placed on the company's technical capabilities and customer relationships. This substantial investment underscores the commercial value at stake in disputes over zero-day vulnerabilities. The private equity acquisition also suggests that Magnet's abilities to develop and maintain exclusive access to previously unknown security flaws represent core business assets justifying a multi-billion dollar valuation. Any breach of confidentiality in such a context therefore represents a threat to investor returns and the strategic rationale for the acquisition itself.
Paradigm Shift Technology's decision to publish research on the vulnerability, according to Magnet's allegations, occurred despite the company presumably knowing that the information was proprietary and originated from competitor development work. The research remains publicly accessible online, meaning that Del Gaudio's alleged transfer of information has resulted in permanent, irreversible disclosure. Magnet has sent multiple cease and desist letters attempting to compel removal of the research, but these efforts have apparently been unsuccessful. The contested information is now available to any actor globally who wishes to develop their own exploitation tools or weaponise the vulnerability for malicious purposes.
This lawsuit arrives in a broader context of escalating concerns about the theft and proliferation of state-sponsored hacking tools. In 2025, a former government contractor employed by military technology firm L3Harris Technologies pleaded guilty to stealing and selling offensive hacking tools to a Russian broker, receiving a prison sentence exceeding seven years. That case illustrated the serious national security and law enforcement consequences when proprietary cybersecurity capabilities leak into unauthorised hands. The Magnet Forensics dispute, while framed as a commercial intellectual property matter, similarly raises questions about how sensitive information regarding digital exploitation techniques can be protected from disclosure.
Neither Del Gaudio, his legal representatives, nor Paradigm Shift Technology has responded publicly to the allegations. Apple Inc also declined to comment on the lawsuit or the vulnerability dispute. The silence from all parties suggests either the early stages of legal proceedings or strategic decisions to avoid public statements that might be used as evidence. For cybersecurity professionals and government agencies that depend on access to zero-day exploitation capabilities, the outcome of this case may significantly influence how such sensitive information is classified, controlled, and compartmentalised within organisations developing and selling such tools.
