Portugal to remove Football Leaks hacker Rui Pinto from witness protection program

Exit from state protection

Portuguese hacker Rui Pinto will formally leave Portugal's witness protection program on 10 October 2026. The determination ends more than six years of specialized security measures granted to him by national authorities following his collaboration with judicial investigators. Among the primary benefits being withdrawn is the state-funded residence in an undisclosed secret location, where Pinto has lived under continuous police protection since August 2020. As a direct consequence of the ruling, Pinto must find and arrange independent housing within the coming days. The conclusion of his placement in the program follows an updated security assessment conducted by Portuguese intelligence services regarding his personal risk level.

Security commission decision

The directive to end Pinto's participation was approved unanimously by the members of the Special Security Programmes Commission (Comissão de Programas Especiais de Segurança). The statutory security body is presided over by Orlando Romano, a former director of the Polícia Judiciária and former national director of the Public Security Police. Standard protections provided under the Portuguese program can include the provision of false identity documents, a regular subsistence allowance, and state-funded transportation. While administrative benefits and secret housing will conclude on 10 October, it remains uncertain whether Pinto will lose physical police protection entirely. That specific measure will depend on a separate determination by a court.

Data cooperation and security incidents

Pinto entered the witness protection framework in August 2020 after being released from pretrial detention and agreeing to cooperate with Portuguese law enforcement authorities. Following his release from prison, the hacker handed over cryptographic keys to investigators, unlocking extensive archives of electronic records taken from sports institutions, law firms, and prominent individuals. The leaked material prompted numerous judicial investigations into tax evasion, financial misconduct, and money laundering across European football. Despite his protected status, Pinto faced direct security incidents in public. In April 2026, he was physically assaulted during an outing in Lisbon, an incident that preceded the intelligence review of his threat level. Portuguese media outlets sought comment from Pinto and his lawyer regarding the commission's decision, but received no response.

Legal verdicts and acquittal

The termination of Pinto's protective status follows several court rulings related to his cyber activities in Portugal and abroad. In September 2023, a Portuguese court sentenced him to a four-year suspended prison term in the initial Football Leaks case, convicting him of attempted extortion, aggravated violation of correspondence, and unauthorized computer access. Two months later, in November 2023, a court in France handed him a six-month suspended prison sentence for illegally accessing the email systems of football club Paris Saint-Germain. Earlier in 2026, Pinto secured an acquittal on 241 criminal counts during a second trial in Portugal. In that ruling, the court criticized the Public Prosecution Service for infringing upon constitutional rights during the investigative process.