The Police Presidium of the Czech Republic ordered all subordinate units to stop updating the forensic software of the company Oxygen Forensics and to wait for further information from the United States. The software, which makes it possible to obtain data from mobile phones and computers, is used by the Czech police, customs officers and the Ministry of Defence, as by many security services in Europe. According to the investigation by US authorities, the company, which presents itself outwardly as an American technology firm based in Virginia, has direct links to Russia.[1][2]
Findings of US investigators
According to US authorities, Oxygen Forensics concealed that it is owned by five Russians through a parent company based in Cyprus, and that the software itself is developed in Russia.[2][3] According to published documents of the US investigators, the developers worked in Russia, while an affiliated company, MKO, sold the same software on the Russian market under different names. Among its customers were reportedly, according to the investigators, the Russian Federal Security Service (FSB), the Russian Investigative Committee and the Russian Ministry of the Interior.[2][3] It was precisely for the effort to hide the true origin of the company and its products that US authorities detained managers of Oxygen Forensics at the end of September 2026.[1][2]
Reaction of Czech authorities
Ondřej Moravčík, spokesman of the Police Presidium, said that the police had noted the steps taken by US authorities against Oxygen Forensics and had adopted “necessary preliminary measures” in connection with this, which it did not specify in more detail given the way the company's products are used. In his words, the police are waiting for official information from the American side, on the basis of which they will decide on further action.[2][3] According to findings by Deník N, police leadership told all subordinate units not to update the software and to wait for further information from the USA.[1][2][3]
Position of NÚKIB
The National Cyber and Information Security Agency (NÚKIB) told the Czech News Agency, in response to a query, that it continuously evaluates information concerning possible threats, including those related to supply chains, without being more specific. Jakub Neščivera, spokesman of the agency, said of the case that similar cases confirm the importance of supply chain security and that, when assessing risks, it is important to evaluate not only the functionality of a particular piece of software but also who develops and manages it, in what environment, and what links they have.[2][3]
Related articles: Policejní prezidium
Chronology
- — The Police Presidium ordered that the Oxygen Forensics software, developed in Russia according to US authorities, no longer be updated. Deník N FORUM 24