tl;dr: Citizen Lab found that former MEP Stelios Kouloglou was infected with NSO Group's Pegasus spyware at least twice (October 2022 and March 2023) while serving on the European Parliament's PEGA Committee investigating spyware abuses, likely exposing confidential committee deliberations. Researchers did not attribute the attack to a specific government but noted infrastructure overlap with a prior Pegasus campaign targeting Russian and Belarusian exiled journalists in Europe, suggesting an operator licensed across multiple EU jurisdictions. This marks the first known case of a sitting PEGA Committee member being hacked during the committee's work.