Background checks, private investigators and litigation are all lawful. Nobody named on this page has been charged in connection with any of it. Nardello & Co. confirmed it worked for Leon Black’s legal counsel but denied any contact with Epstein. Black and Brad Karp deny wrongdoing. What this page sets out is that the same objective — knowing where a person is and what can be used against them — was pursued through four different instruments, against four different kinds of target.
Recording a room and following a person are different acts, and the files contain both.
The cameras have been documented for years — who installed them, what was on the tapes, what happened to the storage unit. The four documents below are a different thing: surveillance conducted on people who were not in his houses at all.
What links them is not a technique. It is a target selection.
A woman who had made a claim against a client was watched for a week by a professional investigations firm, with transcripts made and her immigration status queried. A woman inside his own orbit was simply followed on his written instruction. A household employee was profiled down to vehicle registrations. And the attorney bringing survivors’ cases was sued.
Four categories of person, and in each case the same underlying question: where are they, and what is available about them.
The individual acts are mostly lawful, and that is the point rather than an objection to it. Hiring investigators is legal. Running background checks on staff is legal and common. Filing a lawsuit is a right. Nothing in this list required anyone to break a rule, and no rule required anyone to disclose that it happened.
An accuser — watched for a week by an investigations firm.
A woman in his orbit — followed on his own written instruction.
A household employee — profiled across three states, down to vehicle registrations.
The survivors’ lawyer — sued.
One question, asked four ways: where are they, and what can be used.
Section 01
Four Instruments
Each entry links the documents in the Justice Department release. They establish that the activity occurred; they do not, by themselves, establish anyone’s intent.
Coordinated by the chairman of a major law firm, with Epstein copied in. Nardello confirmed it worked for Black’s counsel but denied any contact with Epstein.
May 2014, in his own words: “follow her, make sure she gets in tonight, get to doct[or] and gets on the plane to florida tomor[row]”
No firm, no lawyer, no intermediary. Epstein directing another person to track a woman’s movements and ensure she boarded a flight. Who she was, and who was being instructed, is not established.
A thirteen-page Comprehensive Background Report compiled on a member of the household: property records, addresses across Palm Beach, Miami Beach and New York, associated persons, driver’s licences and vehicle registrations.
Surveillance pointed inward. The people who cleaned the houses and drove the cars were themselves researched. Background checks on employees are lawful and common; the depth here is the notable part.
Palm Beach Daily News, reporting the claim that “Epstein filed lawsuit to ‘intimidate’ attorney Edwards prosecuting sex abuse cases.” Brad Edwards represented survivors.
The same objective through a different instrument — the courts rather than an investigator. Epstein later dropped the suit; Edwards counterclaimed for malicious prosecution and the matter was settled.
Section 02
Why the Ordinariness Is the Finding
None of these four things is exotic, and none of them required a crime.
Corporate investigations firms are retained every day by law firms acting for wealthy clients. Employers run background checks. Litigants file suits that their opponents consider harassment. Each of these, in isolation, is unremarkable professional activity.
The asymmetry is the whole thing. A woman with a claim was met by a firm on Fifth Avenue with a week of billable hours and a transcript service. A house manager was met by a thirteen-page dossier. A survivors’ attorney was met by a lawsuit he had to defend.
Which means the sample is not representative. It is whatever survived into the release. Four instances are documented here. How many were never written down, or were written down somewhere the Justice Department never seized, is not knowable.
Section 03
Why This Gets Worse, Not Better
The four instruments above are a snapshot of 2015. The reason they are worth reading in 2026 is that every one of them has become cheaper.
That memorandum is the only reason we know it happened. It was expensive enough to be documented, and documented enough to be seized.
An earlier version of this page said the modern equivalent is a database query. That was too generous, and it understated the problem by a tier.
A query describes the passive tier — data already collected about you, aggregated and resold: plates, locations, ad-tech exhaust. Above it sits an active tier, and it is a different thing entirely. Commercial zero-click spyware compromises a phone with no link clicked, no file opened, and no action by the target at all.
Once resident it operates at device level. It reads WhatsApp and Signal messages after they are decrypted on the handset, bypassing end-to-end encryption entirely — and it can activate the microphone and the camera, with real-time interception of audio, video and location.
And the direction of travel is not toward more oversight. There is no comprehensive federal statute governing licence plate readers. The state laws that exist were largely written for police departments, not for the commercial brokers who now collect, aggregate and resell the same data.
This is not a general observation about technology. The people in this archive are in this industry.
Epstein put $1 million into Carbyne, emergency-call software that can reach a caller’s camera and precise location. Ehud Barak — who this archive profiles, and who stayed at Epstein’s properties — was its chairman.
Barak went on to co-found Toka in 2018, whose product alters camera footage in real time, and Paragon Solutions in 2019 with Ehud Schneorson, former commander of Israel’s Unit 8200. Paragon builds Graphite.
No Epstein investment in Toka or Paragon has been established, and none is alleged here. Paragon was founded in 2019, the year he died.
What is documented is narrower and still worth stating: the man conducting surveillance on women in 2015 using human operatives was, in the same period, financially entangled with the people who would go on to build the tools that make human operatives unnecessary.
WhatsApp disclosed in early 2025 that around 90 journalists and members of civil society had been targeted with Graphite. Citizen Lab confirmed infections on iPhones; Italian prosecutors confirmed traces on the phones of journalists and aid workers in March 2026.
Paragon was acquired by the US private equity firm AE Industrial Partners for a reported ~$900 million and merged with a Virginia cybersecurity firm — giving an Israeli spyware company an American corporate parent. Barak is reported to have received $10–15 million from the sale.
On 1 April 2026 ICE’s acting director confirmed to Congress, for the first time, that the agency uses the spyware — under a $2 million contract paused under one administration and revived under the next.
In May 2026 DHS said ICE had no relationship with Paragon or its acquirer, and declined to say whether it could still reach the tools through a third party. Senators requested records in July and asked the GAO to examine federal acquisition of hacking tools in August.
A Band 1 investigations firm. Human operatives across a week. A plant who agreed to wear a wire. A pretext lunch. A transcription service. Two law-firm partners to receive it.
Expensive, bespoke, and slow — and it produced a 24-page memorandum. That memorandum is the only reason any of it is knowable.
Roughly 119,000 automated licence plate readers are mapped across the United States, about 83% of them from a single vendor. A separate network mounts cameras on tow trucks and repossession vehicles and sells the resulting location data to lenders, insurers and marketers.
Karp told Epstein “we have license plate numbers.” In 2015 that meant a person standing outside a garage. It is now a query.
There is no comprehensive federal ALPR statute. State laws that exist were mostly written to govern police use, and do not reach commercial data brokers — an example, as one industry analysis puts it, of technology outpacing legislation.
Audits in 2025–26 found agencies with no data-sharing agreement running an estimated 600,000 searches in twelve months in one city, and another suspending its entire deployment after a vendor error exposed data it had restricted to in-state use.
In one 2025 case, investigators searched 6,809 networks and 83,345 cameras for a woman. The audit log recorded the stated reason as “had an abortion, search for female.” ALPR systems have also been misused for personal lookups — officers tracking spouses, and stalkers tracking former partners.
In August 2015 the chairman of a major law firm wrote to Jeffrey Epstein: “we have license plate numbers.”
Obtaining that sentence required a week of human surveillance, and it survives because somebody typed it into an email that was later seized.
The same sentence is now a product. At the passive tier it is bought from a broker; at the active tier the phone reports its own position, with the microphone and camera available on request — and neither leaves a memorandum behind.
Section 04
Open Questions
Being watched by people with more money than you is frightening, and it is designed to be.
National Human Trafficking Hotline — 1-888-373-7888, or text 233733
RAINN — free and confidential, 24/7: 1-800-656-4673
988 — call or text, any time, in the US
Section 05
Sources
The Five Documents
Each instance above links directly to the original PDF on justice.gov. The Bates numbers are the Department’s own identifiers.
Full reference index →The Nardello Engagement
Feb 2026. The week of surveillance, the Four Seasons transcript, and Nardello’s denial in full.
Read the report →Nardello & Co.
The investigators — and why their denial is the most revealing fact in the episode.
Read the profile →The ALPR Landscape, 2026
The federal gap, the state patchwork, the Fourth Amendment cases, and the 2025–26 cross-jurisdiction audit findings.
recordinglaw.com →Paul Weiss
The chairman, the licence plate numbers, and the one regulated corner of this archive.
Read the profile →Surveillance Architecture
The other half — cameras, tapes, and what was destroyed.
Read the report →“We Can Bury Anyone”
The industry that sells this, with untraceability as a design goal.
Read the report →Keeping Them Quiet
Litigation and settlement as instruments of silence.
Read the report →