Black Cube is a private intelligence company founded in 2010 by former members of Israel’s elite intelligence units. This article comprehensively analyzes the company’s structure, methodologies, and documented operations. It examines Black Cube’s election interventions in Nigeria, Romania, Hungary, Slovenia, and Cyprus, its role in the Harvey Weinstein scandal, its ban by Meta (Facebook), and its organ trafficking operation in Turkey. The article argues that Black Cube represents a new category of “private intelligence actor” that poses systemic risks to democratic institutions and national sovereignty. The findings highlight the need for enhanced regulatory frameworks at both national and international levels.
The Privatization of Intelligence
The post-Cold War era has witnessed the proliferation of private military and security companies operating in areas traditionally reserved for state actors. Private intelligence firms represent a particularly consequential subset of this phenomenon, offering services that blur the boundaries between legitimate corporate investigation, state-sponsored espionage, and political manipulation.
Black Cube, established in 2010 by Dan Zorella and Avi Yanus, both veterans of the Israeli Defense Forces’ special operations units, has emerged as a prominent player in this sector. The company’s growth trajectory reflects broader trends in the globalization of intelligence services. Operating from headquarters in Tel Aviv’s Discount Tower, with branches in London and Madrid, Black Cube currently employs approximately 200 personnel.
According to the company’s self-reported figures, it has operated in more than 75 countries, handled over 540 cases, recovered 5.3 billion dollars in assets, and helped clients obtain 14.7 billion dollars in judgments or settlements. This scale of operations positions Black Cube as a significant non-state actor capable of influencing global economic and political outcomes.
Organizational Structure and Methodology
Founders and Advisory Board
Black Cube was founded by Dan Zorella (CEO), who served in the IDF’s special operations units, and Avi Yanus, who holds a Ph.D. in organizational behavior from the Technion and served as an IDF strategic planning officer. The company’s International Advisory Board includes figures of considerable stature in Israeli intelligence and international security:
Meir Dagan, former Mossad Director, served as chairman until his death in 2016. Efraim Halevy, former Mossad Director, is a current board member. Giora Eiland, retired Major General, is a former head of Israel’s National Security Council. Yohanan Danino is a former Israeli Police Commissioner. Adrian Leppard is a former London Police Commissioner.
This advisory structure demonstrates the deep integration between Black Cube and Israel’s national security establishment.
Operational Methodology
Black Cube’s operational methodology follows a consistent pattern across documented cases:
Fictitious Corporate Fronts: The company establishes seemingly legitimate companies with registered offices, functioning websites, LinkedIn profiles, and email addresses, maintained for months before operational deployment.
False Identity Deployment: Operatives assume false identities, posing as filmmakers, journalists, talent scouts, investors, or activists, to approach targets and conduct surreptitious meetings.
Covert Recording: Meetings are secretly recorded, and operatives gather intelligence through conversation and observation.
Disappearance: Once objectives are achieved, all associated websites are deleted and communication channels are terminated.
Strategic Release: Manipulated content is released at pre-planned times, typically immediately preceding elections or critical legal proceedings.
The “Success Fee” Model
At least some Black Cube contracts, most notably the Weinstein agreement, stipulated that final payment was contingent on operational success. This performance-based compensation model creates incentives for aggressive and potentially unlawful conduct.
Documented Operations: A Pattern of Democratic Interference
Nigeria (2015): Election Interference
According to testimony from Cambridge Analytica whistleblower Christopher Wylie before UK Parliament, Black Cube was hired to hack into medical records of Muhammadu Buhari, the challenger to then-incumbent President Goodluck Jonathan. Jonathan lost the election. Black Cube denied the allegations.
Romania (2016): Criminal Conviction
Black Cube operatives were hired to gather compromising material on Laura Codruța Kövesi, Romania’s chief anti-corruption prosecutor. Operatives David Geclowicz and Ron Weiner traveled to Bucharest to hack her email accounts but were arrested before completing the operation. In a subsequent 2022 court proceeding, Black Cube co-founders Dan Zorella, Avi Yanus, and Executive Director Gal Farchi accepted suspended sentences of two years and eleven months in a Bucharest court after entering a plea agreement on charges of establishing an “organized crime group.” Romania remains the only country to have secured criminal convictions against Black Cube or its leadership. Kövesi now serves as Chief Prosecutor of the European Public Prosecutor’s Office (EPPO).
Harvey Weinstein (2016-2017): Press Suppression
This case represents the most extensively documented Black Cube operation. Film producer Harvey Weinstein, through attorneys at Boies Schiller Flexner, contracted Black Cube when reporters from The New York Times and The New Yorker were investigating sexual assault allegations against him.
The contract explicitly required Black Cube to prevent publication of news articles and exposés. Operatives assumed false identities to target actress Rose McGowan, secretly recording at least four meetings; Ronan Farrow, The New Yorker journalist whose reporting won a Pulitzer Prize; Jodi Kantor, The New York Times reporter; and Annabella Sciorra, an alleged victim.
Subcontractors Roman Khaykin and Igor Ostrovskiy were assigned to surveil journalists. Ostrovskiy eventually became a whistleblower and one of Farrow’s primary sources, documented in Farrow’s 2019 book “Catch and Kill.”
The case generated significant ethical concerns because David Boies, Weinstein’s attorney, simultaneously represented The New York Times while signing the Black Cube contract to suppress the Times’ investigation. The Times labeled this “intolerable conduct, a grave betrayal of trust, and a breach of the basic professional standards that all lawyers are required to observe.”
Canada (2017): Judicial Harassment
Ahead of a significant Ontario Court of Appeal hearing between private equity firms Catalyst Capital and West Face Capital, a Black Cube operative targeted retired Judge Frank Newbould, the original trial judge. Using the false name “Hugo Gabriel Saavedra Rodriguez,” the operative met with Newbould in his office and at a restaurant, secretly recording both meetings in an apparent attempt to provoke anti-Semitic statements that could discredit him. The attempt failed.
Iran Nuclear Deal (2017-2018): Targeting Former Officials
Black Cube agents contacted families of former Obama administration officials Ben Rhodes and Colin Kahl, architects of the Joint Comprehensive Plan of Action (JCPOA), and pretended to be documentary filmmakers. Black Cube compiled detailed dossiers on both officials, including home addresses, family details, and vehicle information. The identity of the client was never established.
Hungary (2018 and 2022): Election Campaigns
Black Cube has twice operated in Hungary ahead of parliamentary elections. In 2018, operatives posed as progressive NGO supporters and approached civil society representatives linked to George Soros to obtain damaging information. A Hungarian magazine subsequently published a list of over 200 people it claimed were part of a Soros conspiracy against the government.
In 2022, the operation repeated with a network of fake LinkedIn profiles and job offers that lured at least 12 journalists and activists critical of Prime Minister Viktor Orbán into video calls. The recordings appeared in pro-Orbán media ahead of elections. In November 2022, LinkedIn confirmed Black Cube’s responsibility and removed all associated fake profiles and the company’s corporate page.
Slovenia (2025-2026): Direct Hybrid Threat
This is the most current and extensively documented case. The Slovenian Intelligence and Security Agency (SISA) confirmed that Black Cube representatives visited Slovenia four times in six months leading up to the 2026 parliamentary elections.
On December 22, 2025, Black Cube CEO Dan Zorella and board member Giora Eiland met with SDS President Janez Janša in Ljubljana. Flight data confirmed that three representatives, Zorella, Eiland, and Liron Tzur, departed from Slovenia on December 25, 2025, after an extended stop at a specific location in Ljubljana.
SISA director presented operational findings confirming Black Cube’s activities followed the company’s established methodologies: recruiting through LinkedIn fake profiles, using operatives with false identities and altered appearances, organizing in-person meetings abroad, and publishing manipulated content at pre-planned times.
Slovenian Prime Minister Robert Golob wrote to European Commission President Ursula von der Leyen, describing the situation as “a grave instance of foreign information manipulation and interference” and “a clear hybrid threat against the European Union.” The Slovenian government formally requested EU investigation.
Cyprus (2026): The “Emily Thompson” Video
In January 2026, a video was posted online by a purported activist named “Emily Thompson,” showing associates of Cypriot President Nikos Christodoulides discussing investment projects and political access. The video triggered multiple resignations and was released days after Cyprus assumed the EU’s rotating presidency.
Black Cube confirmed its involvement in an official statement, declaring it was “proud” to have uncovered “corruption” and helped facilitate a “cleaner business environment” on the island. The company stated it obtained legal advice in every jurisdiction to ensure legality and offered to provide the 30 hours of recorded material to authorities. However, the client who paid for the operation was not disclosed. The Cypriot opposition party AKEL noted that the company’s admission “collapsed the government’s narrative of ‘hybrid wars’ and ‘Russian involvement.’”
Turkey (Date Not Specified): Illegal Organ Trafficking Operation
Black Cube is known to have conducted a direct operation in Turkey. According to a case study published on the company’s own website, it carried out an operation to expose an illegal organ trafficking network run through a Turkey-based company.
The details of this operation are as follows:
Subject: The alleged illegal activities of a Turkish organ transplantation company in cooperation with a network in Israel. The network was alleged to procure organs from impoverished individuals and sell them to wealthy patients at high prices.
Method: Black Cube conducted a comprehensive investigation to uncover the network’s structure, operational methods, and financial sources. The company’s standard methodologies were employed, including false identities, covert recordings, and strategic intelligence gathering techniques.
Result: The findings led to police investigations in the relevant countries, the issuance of Interpol red notices, and the cessation of the network’s activities. Black Cube characterized this operation as a “public interest” effort and stated it was conducted pro bono (free of charge).
This operation demonstrates that Black Cube operates not only in political and commercial spheres but also in areas such as human trafficking and organized crime. This Turkish operation is part of the company’s network of activities across more than 75 countries and is one of the rare examples publicly disclosed.
Digital Operations and Platform Responses
Meta’s (Facebook) Ban
In December 2021, Meta (Facebook’s parent company) announced it had banned seven “cyber-mercenary” groups from its platforms, including Black Cube. The company had launched a seven-month investigation that uncovered approximately 1,500 fake accounts across Facebook, Instagram, and WhatsApp; approximately 300 accounts linked specifically to Black Cube; and approximately 50,000 targets across more than 100 countries.
Meta’s investigation concluded that Black Cube’s targeting was “indiscriminate” and included “journalists, dissidents, critics of authoritarian governments, families of opposition leaders, and human rights activists.” Nathaniel Gleicher, head of security policy at Meta, stated: “The surveillance-for-hire industry looks like indiscriminate targeting on behalf of the highest bidder.”
This ban represents one of the few instances of corporate countermeasures against private intelligence firms.
European Response and Policy Implications
A Pattern of “Hybrid Threats”
Black Cube’s documented operations in Romania, Hungary, Slovenia, and Cyprus demonstrate a consistent pattern of interference in European democratic processes. The company has targeted the head of Romania’s anti-corruption agency, now the EU’s chief prosecutor; journalists and activists in Hungary; the Slovenian Prime Minister’s associates; and the Cypriot President’s inner circle.
These operations frequently coincide with electoral timing, leading Slovenian Prime Minister Golob to characterize Black Cube’s activities as “a clear hybrid threat against the European Union and its Member States” with potential to “negatively impact or potentially threaten our common values, procedures and political processes.”
Institutional Silence
Despite the documented pattern, the European Commission has not publicly acknowledged receiving Slovenia’s formal complaint. This silence has drawn criticism from analysts who note the EU has consistently responded to alleged Russian interference through the “Rapid Response System” and “European Democracy Shield” initiatives, while remaining unresponsive to proven Israeli private intelligence operations.
State-Intelligence Nexus
The relationship between Black Cube and the Israeli state complicates any regulatory response. Israel’s Defense Ministry classifies spyware as weapons, retaining final authority over export licenses. The same officials who oversee these classifications are often alumni of the same intelligence units that populate Black Cube’s leadership.
Conclusion: A Challenge to Democratic Sovereignty
Black Cube represents a new category of actor in international relations: the private intelligence firm with the capacity to influence electoral outcomes, judicial proceedings, and public discourse across multiple sovereign states. With offices in Tel Aviv, London, and Madrid, a staff of approximately 200, and a reported reach across 75 countries, the company’s operational scale rivals that of many national intelligence agencies.
Several patterns emerge from the documented cases:
First, Black Cube’s operations consistently target democratic processes, particularly elections and anti-corruption mechanisms. The company has intervened in elections in Nigeria (2015), Hungary (2018, 2022), and Slovenia (2026), and targeted anti-corruption prosecutors in Romania and Cyprus. In Turkey, it conducted operations in the areas of organized crime and human trafficking.
Second, the company demonstrates sophisticated operational security, establishing corporate fronts, deploying false identities, and erasing digital footprints immediately after operations conclude.
Third, the state-private intelligence nexus raises fundamental questions about sovereignty. Black Cube’s leadership includes two former Mossad directors, a former head of Israel’s National Security Council, and other senior Israeli intelligence figures, suggesting operational or tacit support from the Israeli state.
Fourth, the European Union’s failure to respond to documented Israeli private intelligence interference while vigorously addressing alleged Russian interference suggests selective application of democratic resilience principles.
The European Democracy Shield, launched in February 2026, and the European Centre for Democratic Resilience represent institutional frameworks for addressing foreign interference. As Slovenian Prime Minister Golob noted, the Slovenia case “provides a critical test of its mandate to protect Member States against foreign interference.” However, without an effective regulatory response to private intelligence actors like Black Cube, these institutions risk legitimizing a double standard in which threats from certain sources are addressed while comparable threats from others are ignored.
Future research should examine the regulatory gaps that enable private intelligence firms to operate across borders with impunity, the mechanisms by which state-linked private actors maintain plausible deniability while serving state interests, and the potential for international legal frameworks to address the unique challenges posed by this emerging category of transnational actor.
References
- Prime Minister Robert Golob. (2026, March 18). Prime Minister Robert Golob informs the President of the European Commission of foreign interference in Slovenia’s elections in a letter. GOV.SI. https://www.gov.si/en/news/2026-03-19-prime-minister-robert-golob-informs-the-president-of-the-european-commission-of-foreign-interference-in-slovenias-elections-in-a-letter/
- The New York Times. (2017, November 15). Deception and Ruses Fill the Toolkit of Investigators Used by Weinstein. https://www.nytimes.com/2017/11/15/business/deception-and-ruses-fill-the-toolkit-of-investigators-used-by-weinstein.html
- Al Jazeera. (2021, December 17). Meta bans ‘cyber-mercenaries’ that targeted 50,000 people. https://www.aljazeera.com/news/2021/12/17/meta-bans-cyber-mercenaries-spying-on-journalists-activists
- Cyprus Radio Broadcasting Corporation. (2026, April 10). Intelligence company behind the “Emily Thompson” video. https://tr.news.rik.cy/tr/article/2026/4/10/emily-thompson-videosunun-yapiminin-arkasindaki-istihbarat-sirketi/
- Mladina.si. (2026, March 16). Investigation Report: How Israelis Met with Janez Janša. https://www.mladina.si/247422/investigation-report/blackcube.com/committees.parliament.uk/oralevidence/7803/committees.parliament.uk/oralevidence/7803/html
- Marks Gray. (2017, December 20). Attorney David Boies’s Career-Killing Ethical Breach for Weinstein. https://marksgray.com/media-law/attorney-david-boiess-career-killing-media-stories-weinstein/
- China Press. (2021, December 16). 7 companies banned for using Facebook to monitor 10,000 people. https://www.chinapress.com.my/?p=2787960
- Black Cube. (n.d.). Uncovering a Criminal Organ Trafficking Network. https://www.blackcube.com/case-study/pro-bono-organ-trafficking
- GOV.SI. (2026, March 18). Press release following the meeting of the National Security Council Secretariat. https://www.gov.si/en/news/2026-03-18-press-release-following-the-meeting-of-the-national-security-council-secretariat/
- eKathimerini.com. (2026, April 10). Israeli firm Black Cube confirms Cyprus sting to ‘expose corruption’. https://www.ekathimerini.com/politics/foreign-policy/1300775/israeli-firm-black-cube-confirms-cyprus-sting-to-expose-corruption/
- Law.com. (2020, January 30). Boies Schiller Lawyer Testifies Firm Helped Hire Ex-Spies to Aid Harvey Weinstein. https://www.law.com/newyorklawjournal/2020/01/30/boies-schiller-lawyers-says-firm-helped-hire-ex-spies-to-aid-harvey-weinstein/
- NEWSru.co.il. (2021, December 17). Meta announces it has blocked access to the Facebook platform for four Israeli cyber-espionage companies. https://www.newsru.co.il/finance/17dec2021/facebook302.html
- AKEL. (2026, April 14). Five days after the Black Cube company’s statement on Videogate, the Christodoulides government still maintains its deafening silence. https://akel.org.cy/black-cube/?lang=tr
- RT International. (2026, April 27). Wired for War: Why is the EU ignoring the Israeli cyber threat?. https://rtnewsru.com/news/639159-israel-spies-eu-pegasus/
- The Jerusalem Post. (2026, May 19). Black Cube doubles office space in Tel Aviv. http://members.jpost.com/business-and-innovation/article-896834
- Black Cube. (n.d.). Uncovering a Criminal Organ Trafficking Network. https://www.blackcube.com/case-study/pro-bono-organ-trafficking
Sefa Yürükel
Danish ethnographer and social anthropologist (MA)
Aarhus University, 1997
Independent Researcher
Fields of Research: International Politics, Public International Law, Geopolitics, Sociology, Psychology, Cultural Studies, Systems and Structures.
Leave a Reply