Pegasus spyware was used by EU member states and non-EU countries, particularly in Poland and Hungary, as stated in the PEGA Committee's 2023 report.

Omissions

• The PEGA report and the Parliament's 15 June 2023 recommendation also documented spyware use in Greece, Spain and Cyprus, not only in Poland and Hungary; the claim's wording 'particularly in Poland and Hungary' is nonetheless consistent with the report's emphasis (the EP press release singles out Poland and Hungary for 'major violations of EU law' and the dismantling of oversight mechanisms).
• The '145-page' figure is corroborated by the EP Think Tank (secondary source); the committee adopted the report in spring 2023 and the plenary adopted the final recommendation on 15 June 2023, so the claim's reference to '2023' is accurate.
• The primary source used (EUR-Lex, CELEX 52023IP0440) is the Official Journal version of the recommendation, published in 2024, i.e. after the session date; the resolution text itself was adopted on 15 June 2023, before the session.

Sources

• PrimaryEUR-Lex — European Parliament recommendation of 15 June 2023 on the PEGA investigation (CELEX 52023IP0440)Official Journal publication (C/2024/4226) of Parliament's recommendation following the investigation of alleged contraventions and maladministration in the application of Union law in relation to the use of Pegasus and equivalent surveillance spyware (A9-0189/2023); the text refers to the recommendation adopted on 15 June 2023 and to measures regarding 'Hungary, Poland and Spain set out in the recommendation'.
• SecondaryEP Think Tank (epthinktank.eu) — What action has Parliament taken against spyware abuse?In March 2023, PEGA adopted a 145-page report with the results of its investigation; Parliament adopted its final recommendation in June 2023. Parliament found that both EU and non-EU countries had used Pegasus and similar spyware for political and even criminal purposes.
• SecondaryEuropean Parliament press room — Spyware: MEPs sound alarm on threat to democracy and demand reformsMEPs condemn major violations of EU law in Poland and Hungary, where the respective governments have dismantled independent oversight mechanisms, in the context of the PEGA committee's report on the use of Pegasus and equivalent surveillance spyware.
• Secondaryeucrim — EP Recommendation on Lessons Learned from Misused SpywareOn 15 June 2023, the plenary of the European Parliament adopted a recommendation outlining reforms to curb spyware abuse; the recommendation contains explicit calls on Poland, Hungary, Greece, Spain and Cyprus, whose governments were involved in the misuse.