Amit Forlit, an Israeli private investigator, was arrested at Heathrow Airport in April 2024 under an Interpol red notice.
Forlit is charged by the U.S. Department of Justice with conspiracy to commit computer hacking, conspiracy to commit wire fraud, and wire fraud.
The charges carry maximum sentences of five, 20, and 20 years’ imprisonment, respectively.
Forlit’s extradition to the U.S. was approved by District Judge John McGarva at Westminster Magistrates’ Court in April 2025.
The extradition was certified by the UK Home Secretary.
The UK High Court of Justice denied Forlit’s request to appeal the extradition decision on March 19, 2026.
U.S. prosecutors allege Forlit was paid $16 million by a Washington D.C. lobbying firm to conduct cyberattacks targeting individuals or groups involved in climate litigation against ExxonMobil.
Forlit’s defense named ExxonMobil and the DCI Group as clients in court papers filed in January 2025.
Both ExxonMobil and the DCI Group have denied any involvement in the hacking operation.
Forlit stated in a 2022 deposition that he had “never commissioned hacking and never paid for hacking.”
Forlit’s legal team argued that the extradition decision did not properly scrutinize evidence of unsafe conditions at the Metropolitan Detention Center in Brooklyn.
The UK Crown Prosecution Service confirmed Forlit must be surrendered to U.S. authorities within 28 days of March 19, 2026.

Amit Forlit, an Israeli private investigator, has been denied permission to appeal his extradition to the United States by the UK High Court of Justice. Forlit is wanted by U.S. law enforcement for allegedly orchestrating a "hacking-for-hire" operation on behalf of ExxonMobil between 2013 and 2018. He faces charges of conspiracy to commit computer hacking, conspiracy to commit wire fraud, and wire fraud, which carry potential sentences totaling up to 45 years in prison. The extradition was approved by District Judge John McGarva in April 2025 and certified by the UK Home Secretary. Forlit’s defense claims he was paid $16 million by a Washington D.C. lobbying firm, DCI Group, to target individuals or groups involved in climate litigation against ExxonMobil. Both ExxonMobil and DCI Group have denied any involvement in the hacking operation. Forlit’s legal team argued that the extradition decision failed to adequately consider unsafe prison conditions at the Metropolitan Detention Center in Brooklyn, where he would likely be held. The UK Crown Prosecution Service has confirmed that Forlit must be surrendered to U.S. authorities within 28 days of the March 19, 2026 ruling.
The case raises questions about corporate involvement in cyber operations and the legal boundaries of private intelligence work. While Forlit maintains his innocence, the allegations suggest a coordinated effort to undermine climate litigation through illicit means. The extradition process highlights the complexities of international law enforcement cooperation in cybercrime cases.

The strongest version of this narrative presents a clear case of alleged corporate espionage, where a private investigator is accused of orchestrating cyberattacks to undermine climate litigation against a major oil company. The reporting provides a detailed timeline, legal context, and the perspectives of both the prosecution and defense, including denials from ExxonMobil and the DCI Group. The inclusion of Forlit’s own denial adds a layer of complexity, as does the focus on extradition procedures and prison conditions, which humanizes the legal process.
However, the narrative also invites scrutiny of potential manipulation patterns. The framing of ExxonMobil and the DCI Group as shadowy actors—despite their denials—could subtly reinforce a "David vs. Goliath" dynamic, where corporate power is assumed to be corrupt. This risks oversimplifying a legally unresolved case. Additionally, the emphasis on Forlit’s potential 45-year sentence may evoke emotional responses, such as outrage or fear, which could distract from the unresolved legal and factual questions. The article does not engage in overt distortion, but the selection of details—such as the $16 million payment—could amplify perceptions of corporate malfeasance without definitive proof.
At its core, this story reflects broader tensions between corporate accountability, cybersecurity, and the weaponization of legal processes. The allegations, if proven, would underscore how private intelligence operations can be deployed to suppress dissent or litigation. Yet the case also highlights the challenges of extradition and the presumption of innocence in high-stakes legal battles. The implications for human agency are significant: if corporations can allegedly hire hackers to target adversaries, what protections exist for whistleblowers, activists, or litigants? Conversely, if Forlit is falsely accused, the case could exemplify the risks of overreach in cybercrime prosecutions.
Bridge questions: What evidence would conclusively prove or disprove ExxonMobil’s involvement? How might this case influence future cybersecurity regulations or corporate accountability measures? What safeguards are needed to prevent the misuse of private intelligence in legal or political conflicts?
Counterstrike scan: A coordinated influence campaign might exploit this narrative to fuel distrust in corporate power or legal systems, using emotional framing to polarize audiences. However, the article itself adheres closely to factual reporting and legal context, without clear signs of manipulation. The inclusion of denials and legal procedures suggests a balanced approach, though the focus on climate litigation could appeal to specific ideological audiences.
Patterns detected: none