Leaked Cellebrite Matrix Details Pixel Data-Extraction Capabilities
Summary
A leaked Cellebrite briefing screenshot reportedly says its tools can extract data from stock Pixel 6–9 phones in BFU, AFU and unlocked states, while updated GrapheneOS builds resist extraction. The claims are not independently verified.
Key points
- A person using the handle rogueFed reportedly posted screenshots from a Cellebrite briefing to the GrapheneOS forums; 404 Media spotted the post.
- The screenshot reportedly covers Pixel 6, 7, 8 and 9 phones, but not the Pixel 10 series, and distinguishes BFU, AFU and unlocked states.
- According to the matrix, Cellebrite tools can extract data from stock Pixel 6–9 phones in all three states, but cannot brute-force passcodes.
- For GrapheneOS, the matrix reportedly lists access only on software from before late 2022; updated builds resist extraction in BFU and AFU states.
- The matrix reportedly says that, as of late 2024, even an unlocked GrapheneOS device is immune to this data-copying method.
- The leaker also claims law enforcement cannot copy eSIMs from Pixel devices; the article says Google had been asked to comment.
Article Details
- Event Type
- A leaker published screenshots of a Cellebrite briefing describing phone data-extraction capabilities for Google Pixel devices.
- Impact
- According to the leaked matrix, Cellebrite tools can extract data from Pixel 6, 7, 8, and 9 devices running stock software in before-first-unlock, after-first-unlock, and unlocked states, but cannot brute-force passcodes or copy eSIMs. The matrix reportedly indicates that updated GrapheneOS builds resist extraction in before-first-unlock and after-first-unlock states, and that fully unlocked devices running GrapheneOS have resisted data copying since late 2024. These capabilities were described in a leaked briefing and are not independently confirmed in the article.
People
Vendors
CellebriteThat has thankfully changed, but companies like Cellebrite offer law enforcement tools that can bypass security on some devices.GoogleThe company keeps the specifics quiet, but an anonymous individual recently logged in to a Cellebrite briefing and came away with a list of which of Google’s Pixel phones are vulnerable to Cellebrite phone hacking.
Products
Google Pixel 10It does not list the Pixel 10 series, which launched just a few months ago.GrapheneOSThis person, who goes by the handle rogueFed, posted screenshots from the recent Microsoft Teams meeting to the GrapheneOS forums (spotted by 404 Media).Pixel 6The screenshot includes data on the Pixel 6, Pixel 7, Pixel 8, and Pixel 9 family.Pixel 7The screenshot includes data on the Pixel 6, Pixel 7, Pixel 8, and Pixel 9 family.Pixel 8The screenshot includes data on the Pixel 6, Pixel 7, Pixel 8, and Pixel 9 family.Pixel 9The screenshot includes data on the Pixel 6, Pixel 7, Pixel 8, and Pixel 9 family.