Thanasis Photiou
Six months after an eight-minute video hit the platform X from the account "Emily Thompson," the situation looks completely different than it did during those first few hours. We now know which firm produced the material, how Cypriot authorities got their hands on the original 26-hour audiovisual recording, who took part in the operation, and what issues the independent criminal investigator looked into. Still, despite the size of the investigation and the sheer volume of gathered evidence, the core question stays open: who ordered the job, and what were they actually trying to achieve? The answer is no minor detail. It is probably the only piece of the puzzle that could explain everything leading up to this point and reveal whether this was a private effort to expose corruption or a maneuver with far-reaching political motives.
From Russia... to Israel
The day the video leaked, the government reacted immediately. Officials first called it an edited clip meant to damage the country's image. A short while later, they went a step further and labeled it an organized hybrid attack against the Republic of Cyprus.
That public stance changed everything instantly. Within hours, theories spread about foreign intelligence involvement, pointing fingers mainly at Russia. The timing reinforced that narrative, since Cyprus had just assumed the Presidency of the Council of the European Union alongside an already tense global environment. Looking back, though, that theory completely collapsed.
When Politis broke the news that the Israeli private intelligence firm Black Cube was behind the clip, followed by the firm's own public confirmation, the entire debate shifted. That brought out the case's first massive paradox. Black Cube is not some average consulting group. It is one of the most prominent private intelligence agencies in the world, staffed largely by former Israeli security officers with years of experience handling corporate disputes, international arbitrations, and high-stakes political cases. Its reputation relies entirely on discretion. In almost every international case linked to its name, the company has avoided the spotlight, stuck to legal filings, and never framed its operations as public anti-corruption crusades.
That is precisely why its statement on the Cyprus case caught everyone off guard. It was not just confirming its role, it was positioning itself almost like a public whistleblower. The firm declared it was proud to expose corruption, claimed it cooperated with Cypriot authorities, and presented the project as a effort to build a cleaner business environment. That posture stands in stark contrast to how Black Cube handled past international operations. Naturally, it brings up an obvious question: why would a company that built its global brand on secrecy suddenly abandon that approach and publicly claim responsibility? That decision is even more striking when you notice the statement focuses entirely on Cyfield, with no real mention of the political dimension or the individuals holding institutional roles.
The unknown client
Learning that a major international private intelligence firm created the video answered a key question, but it left the biggest one open: who placed the order, and what was their end goal? That remains the main missing piece in this story, and the independent investigator's announcement implicitly acknowledges it. Even though we know the company, the agents involved, and have secured the full 26-hour recording, the client who commissioned the operation is still unknown.
Unpersuasive findings
This is where reading the announcement gets interesting. It is not just about what the text says, but how it chooses to say it. Every criminal investigation draws a clear boundary between facts you can prove, assessments drawn from those facts, and conclusions an investigator feels are justified. In Mr. Paschalides's announcement, those three levels blur together. In several spots, the text slips almost imperceptibly from presenting evidence to interpreting it, and then straight into definitive conclusions. The clearest example is how it introduces the label "hybrid attack".
The announcement lists several points: the edited clip came out one day after Cyprus took over the EU Council Presidency; it mentions campaigns that the investigator believes targeted EU member states starting in 2021; and it notes that the pitch given to the Cypriot figures does not match the company's version of its client's motives. Right after those points, it concludes that "as things stand right now," the video counts as a hybrid attack aimed at harming the Republic of Cyprus.
Without a doubt, that is the most politically charged statement in the entire document. Yet that same announcement clarifies that investigators still have not identified the client. From a reporting perspective, the logic feels disconnected: if we still do not know who gave the order, what evidence allows anyone to declare the target of the operation with such certainty? Pointing this out does not automatically discredit the investigator's conclusion, but it shows a clear gap in the public explanation.
Corruption vs. bluster
The announcement states that the public eight-minute clip is not authentic because it was edited, adding that it holds little to no evidentiary value. That statement drew a fast public response from Black Cube. Through its lawyer, the firm maintained that before taking statements from its team, authorities had to confirm the authenticity of the unedited 26-hour raw footage turned over to Cypriot officials. The lawyer also called the "hybrid attack" conclusion premature. This is more than a simple disagreement between two parties; it is two totally different readings of the same material. On one side, the announcement focuses on how the public video was edited. On the other side, the company that made it claims authorities verified the raw footage before real cooperation even started. The question is not whether the clip was edited, since everyone agrees on that. The real question is whether the public announcement clearly explains how that editing altered the conversation and rendered the video useless as evidence. On that point, the document falls short.
Tone and phrasing
The language chosen to describe the main figures is also worth noting. The clearest example is the claim that everything heard on tape is nothing more than hot air and bluster meant to manufacture impressions and make money. The way the announcement uses the figures' own actions during the investigation is equally interesting. According to the document, when asked to explain what was said on tape, only one person responded, which the investigator claimed confirmed the "hot air" theory. Exercising the right to remain silent during a criminal inquiry is a basic legal right, so using that silence even indirectly to validate the investigation's conclusions feels shaky. Pointing it out gives the impression that their silence is being used to build the argument. On top of that, the text relies heavily on firm, definitive statements before presenting public proof to back them up.
Off the hook
Despite the clarifications and pushback, the announcement seems to wrap up the criminal side of the case for the Cypriot figures. Still, ruling out criminal charges does not automatically clear up every question this story created. Criminal liability, political judgment, ethics, and public accountability are distinct areas with different standards. Getting cleared on one front does not solve the rest.
Public debate will not just fade away over claims of hot air and bluster. In a case that touched the credibility of public institutions, political life, and the Republic itself, finishing a criminal probe is only half the job. The findings need to convince people, not just in their final result, but in the path taken to reach them. In high-profile cases like this, public trust relies on the transparency of the logic behind the conclusions.
