Stelios Kouloglou files criminal complaint against NSO Group over Pegasus infections

# Summary

Journalist and former MEP Stelios Kouloglou has filed criminal charges against executives of NSO Group after a forensic analysis found his mobile phone had been infected with Pegasus spyware. The infections were dated to around 21 October 2022 and 6–7 March 2023. Kouloglou says the intrusions allowed access to a wide range of personal and professional data while he served on the European Parliament's PEGA Committee investigating surveillance tools.

# What happened

Kouloglou initiated legal action after Citizen Lab at the University of Toronto's Munk School conducted a forensic analysis that identified successful Pegasus infections on his device on the specified dates. He alleges the spyware installation allowed perpetrators to access communications, contacts, documents, health records and files related to his parliamentary work.

In his complaint he names executives of NSO Group and frames the intrusions as felony acts. The complaint lists criminal counts that include unlawful wiretapping, violation of the confidentiality of phone communications, unauthorized access to an information system or data, and breach of personal data protection laws.

# Context and relevance

Kouloglou was serving as a substitute member of the European Parliament's Committee of Inquiry into Pegasus and equivalent surveillance spyware (the PEGA Committee) when the infections occurred. He highlights that the intrusions exposed material linked to his professional and political activities on that committee.

He also notes that some of the individuals named in his complaint are under investigation in other European jurisdictions. Kouloglou commented: "I hope the Greek justice system does its job." The filing adds to a series of legal and political developments across Europe related to commercial spyware and alleged misuse.

# Concrete implications

• Criminal proceedings in Greece will determine whether the named NSO executives can be held responsible under Greek criminal statutes for the alleged offences.
• The case links alleged surveillance of a journalist and former lawmaker directly to a company whose products have been central to parliamentary and judicial inquiries across Europe.
• If prosecutors find evidence supporting the charges, the case could produce indictments or further cross-border cooperation with authorities investigating related allegations elsewhere.

# Where this sits in ongoing coverage

# Immediate takeaways for readers

• The forensic timeline is specific: infections around 21 October 2022 and 6–7 March 2023. Those dates coincide with Kouloglou's role on the PEGA Committee.
• The complaint names NSO Group executives and builds a criminal case under Greek law on wiretapping and unauthorized access.
• The filing ties into wider, transnational probes of commercial spyware use and alleged misuse of surveillance tools.

# Quote

"I hope the Greek justice system does its job," Kouloglou said after filing the complaint.