Forensic analysis of two phones seized in a small Swedish town revealed encrypted communications linking multiple organised‑crime groups, prompting coordinated raids and arrests. Eurojust and Europol coordination, with Australian Federal Police participation, led to about 15 arrests across Spain, Sweden and Thailand and seizures tied to drug trafficking and money‑laundering.

Law enforcement described 'Operation Candy' as a striking example of how modest initial seizures can unravel expansive criminal networks. Authorities said forensic extraction and decryption work on two mobile phones seized in a small Swedish municipality yielded encrypted chats, contact networks and transaction indicators that tied multiple criminal groups across continents. Acting on that intelligence, coordinated operations conducted between March 4 and 6 resulted in roughly 15 arrests and the seizure of assets, evidence and proceeds linked to large‑scale drug trafficking, money‑laundering and related transnational criminal activity in Spain, Sweden and Thailand. Eurojust and Europol coordinated the cross‑border legal and operational cooperation, and the Australian Federal Police provided investigative and analytical support, highlighting multiagency collaboration. Investigators emphasized the role of mobile forensics and communications analysis in tracing hierarchies, money flows and logistics, and noted that dismantling such networks requires rapid intelligence sharing, targeted warrants and synchronized action across jurisdictions. Authorities continue to analyze recovered data to pursue additional suspects and financial leads.