Polish PM Donald Tusk says state authorities under the previous government used NSO's Pegasus spyware illegally against a “very long” list of hacking victims
Vanessa Gera / Associated Press :
Context & Ripple Effects
This adds Poland to a European record of Pegasus-related controversy: Spain said its prime minister and defense minister were infected, while France found the malware on journalists’ phones. NSO’s counsel had also told EU lawmakers that at least five EU countries used Pegasus, underscoring that the issue extends beyond a single national deployment.
The key distinction in Poland is the allegation of unlawful use by state authorities against a broad victim set. It echoes earlier reporting that Israeli police allegedly used Pegasus without warrants or court oversight, putting legal authorization and accountability—not merely the tool’s capability—at the center of the story.
First-order effects
- The allegation puts the prior Polish government’s surveillance practices under immediate political and legal scrutiny, while potentially giving a large group of alleged victims grounds to seek disclosure and redress.
- NSO and Pegasus face renewed reputational pressure because the reported use concerns alleged domestic illegality by a state customer, rather than an assertedly lawful security operation.
Second-order effects
- European agencies using or considering intrusive spyware may face pressure to demonstrate warranting, targeting controls, and independent oversight; Germany had acknowledged operational use of Pegasus for terrorism and organized-crime cases, illustrating the contrast such users will need to defend.
- The case can make procurement and renewal decisions harder for commercial spyware vendors and public-sector buyers, as political exposure becomes a cost alongside the technology’s investigative value.
Third-order effects
- If comparable allegations continue to emerge, the market for government spyware is likely to shift toward tighter deployment rules, audit trails, and greater judicial or parliamentary oversight rather than opaque executive control.
- The broader test will be whether governments create enforceable safeguards for dual-use surveillance tools; disclosure alone does not establish that cross-border standards will converge.
The trend: Pegasus controversies are turning state spyware from a procurement question into a governance question centered on authorization, oversight, and remedy for unlawful surveillance.