What Happened
A government customer of NSO Group used the company's Pegasus spyware to hack into the phone of a European politician, who at the time was serving on an EU committee tasked with investigating the spyware industry.
The incident was reported by TechCrunch on July 3, 2026.
Why It Matters
The disclosure shows that a government client of NSO Group allegedly deployed the same surveillance tool that the EU committee was examining. This creates a direct conflict of interest: a product under investigation was used against a law‑maker responsible for that investigation. Such a situation can erode confidence in the independence of oversight processes and raise questions about the safeguards that govern the use of commercial spyware by governments.
Who Is Affected
The European politician – whose device was compromised while serving on the EU committee.
The EU committee – its ability to conduct an unbiased review may be compromised.
NSO Group – the episode adds pressure on the company to demonstrate responsible sales and usage practices.
Government customers – agencies that purchase Pegasus may face increased scrutiny over how they apply the software, especially when domestic political bodies are involved.
What to Watch Next
EU legislative response – Lawmakers may propose transparency measures for government procurement of surveillance technology.
Legal challenges – The targeted politician could pursue legal action, potentially setting precedents for privacy protection within the EU.
Corporate accountability – NSO Group might encounter inquiries from regulators or civil‑society groups demanding tighter controls on its product distribution.
International dialogue – The case could feed broader discussions on the export of cyber‑tools and the responsibilities of vendor states.
The incident underscores the importance of clear boundaries between surveillance vendors and the political bodies tasked with overseeing them.
Source: TechCrunch, “Politician who investigated spyware abuses had his phone hacked with Pegasus spyware”, July 3, 2026.