Given the input sentence, please extract the subject and object containing a certain relation in the sentence according to the following relation types, in the format of "relation1: word1, word2; relation2: word3, word4". Relations include: product/material produced; manufacturer; distributed by; industry; position held; original broadcaster; owned by; founded by; distribution format; headquarters location; stock exchange; currency; parent organization; chief executive officer; director/manager; owner of; operator; member of; employer; chairperson; platform; subsidiary; legal form; publisher; developer; brand; business division; location of formation; creator.

Hacking Team is not new to controversy, as several human rights organizations have listed it as an "an enemy of the Internet," with Citizen Lab - which studies surveillance at the Munk School of Global Affairs at the University of Toronto - stating that it has found Hacking Team's spyware in 21 countries, including Sudan, Egypt, Ethiopia, Turkey and Malaysia, according to NPR.

Answer: headquarters_location: Citizen Lab, University of Toronto