Former Member of the European Parliament Stelios Kouloglou was hacked with Pegasus spyware while serving on the PEGA committee investigating spyware abuses in Europe, Citizen Lab reported. The forensic analysis revealed that attackers potentially accessed confidential documents and committee deliberations during his tenure, raising concerns about espionage within EU institutions.
Citizen Lab researchers John Scott-Railton, Bill Marczak, Bahr Abdul Razzak, Kate Pundyk, Siena Anstis, and Ron Deibert conducted the investigation. Their analysis of Kouloglou’s device uncovered traces of Pegasus spyware, a tool developed by NSO Group known for targeted surveillance. The hack occurred amid the committee’s work probing the misuse of such spyware across European countries.
The incident highlights the risks faced by lawmakers involved in sensitive investigations, especially those targeting surveillance technologies. Pegasus spyware has been linked to multiple high-profile breaches globally, prompting scrutiny of digital security in government bodies. The breach of a committee member’s device underscores vulnerabilities in protecting confidential political deliberations from foreign or unauthorized actors.
Citizen Lab published its findings on July 3, 2026, detailing the intrusion and its implications. The report calls for stronger cybersecurity measures within the European Parliament and increased transparency around spyware use. The PEGA committee continues its inquiry into spyware abuses, now with evidence of direct targeting of its members.