The issue of Polish state institutions secretly monitoring opposition leaders' smartphones using the Israeli-made Pegasus spyware has come under scrutiny. It was disclosed that monitoring data passed through servers outside the country and that the developer could also have had technical access to the information.
It has emerged that state institutions in Poland introduced and operated Pegasus, and it has been alleged that the smartphone of an opposition election chief was compromised. Pegasus is described as surveillance software capable of obtaining messages, calls, photographs, location data and other information without the user's knowledge.
According to an examination by the public prosecutor's office released on 12 October 2026, the surveillance information passed through servers inside and outside the country, leaving the developer, NSO Group, in a position to access the monitoring materials technically. It has not been confirmed that NSO actually viewed the information, but it was found that the government did not have complete control over the communications data of domestic politicians.
A total of 7 people, including former intelligence agency officials, were notified that they were suspects. The investigation concerns suspected abuses of surveillance authority, improper provision of surveillance materials and surveillance conducted without sufficient grounds.
The issue has become a case that once again raises questions about how overseas companies can access information and the scope of the surveillance powers held by state institutions.
Prime Minister Tusk criticised the operation of Pegasus under the former administration following the announcement, while the PiS administration argued that it had been operated under legitimate procedures.