Palantir Faces Hacking Allegations
Reports have emerged of an alleged hack at government data-collection firm Palantir. Unauthorized actors claim to have accessed sensitive data, according to the report. While details remain unconfirmed, the incident intensifies scrutiny over data stewardship at the company, which specializes in government and enterprise data analysis.
- The most recent allegations originated from entrepreneur Kim Dotcom on social media, who claimed hackers accessed top-secret data that would be transferred to Russia and China; Palantir's CTO, Shyam Sankar, has rebutted the claim. - Palantir's core business relies on high-stakes data analysis for government bodies, with clients including the CIA, FBI, and various branches of the U.S. military; the Department of Defense alone has awarded the company at least $1.65 billion in contracts since 2008. - The company's software, including its Gotham platform, has been used by U.S. Immigration and Customs Enforcement (ICE) for data analysis and to build a database called ImmigrationOS to help track undocumented people. - This is not the first security issue to put the company in the spotlight; in 2021, reports emerged of a glitch that allegedly allowed the FBI unauthorized access to private data for over a year, though Palantir contended it was a misuse of the software by the agency. - In October 2025, the company sued two former employees for allegedly stealing confidential company documents and proprietary source code to help form a rival AI analytics startup. - The company's reach is international, holding a controversial £330m contract with the UK's National Health Service (NHS) to build an AI-enabled data platform, which has raised concerns among health officials and doctors. - Palantir’s primary products are "Gotham," used by government and intelligence agencies for tasks like counterterrorism, and "Foundry," which is used by corporate clients to analyze their own data. - The company states that its platform has robust security features, including mandatory encryption for all data, strong access controls, and security audit logs to investigate potential abuse.