A new report from Citizen Lab at the University of Toronto says Greek journalist and former European Parliament member Stelios Kouloglou had his phone compromised by Pegasus spyware in 2022 and 2023 while serving on the Parliament's PEGA committee.
The committee was created to examine how spyware is used across Europe, making the case especially significant. According to the researchers, the intrusion used a zero-click exploit tied to an Apple software vulnerability, allowing access without any action from the device owner.
Citizen Lab says the attack exposed private messages, location data, photos, and other communications. The timing also overlapped with committee work and hearings, adding weight to concerns about how advanced surveillance tools can reach into public institutions and personal life at the same time.
Kouloglou said he was targeted because of his role in the investigation and described the breach as a serious violation of privacy. He also said he intends to pursue legal action against NSO Group, the company behind Pegasus.
The case adds fresh momentum to the debate over tighter rules for spyware use in Europe and beyond. As digital oversight grows, so does the need for stronger safeguards that protect both democratic work and personal data in the years ahead.