{"id":"POL-001","notes":"Coded Sep 25 2026. Date = Brejza infections during the 2019 election campaign; overall use 2017–2022. Secondary TC-16: stolen messages doctored and broadcast by state TV. First Polish case in the database.","country":"Poland","sources":[{"url":"https://notesfrompoland.com/2024/04/16/almost-600-people-targeted-with-pegasus-spyware-under-former-polish-government/","citation":"https://notesfrompoland.com/2024/04/16/almost-600-people-targeted-with-pegasus-spyware-under-former-polish-government/"},{"url":"https://therecord.media/poland-pegasus-spyware-more-than-500-citizens","citation":"https://therecord.media/poland-pegasus-spyware-more-than-500-citizens"},{"url":"https://www.euronews.com/2022/01/07/poland-s-kaczynski-admits-country-bought-pegasus-but-denies-spying-on-opponents","citation":"https://www.euronews.com/2022/01/07/poland-s-kaczynski-admits-country-bought-pegasus-but-denies-spying-on-opponents"},{"url":"https://cyberdefence24.pl/polityka-i-prawo/citizen-lab-potwierdza-wykradano-dane-z-telefonu-brejzy-dotyczace-jego-dzialalnosci-politycznej","citation":"https://cyberdefence24.pl/polityka-i-prawo/citizen-lab-potwierdza-wykradano-dane-z-telefonu-brejzy-dotyczace-jego-dzialalnosci-politycznej"}],"summary":"Citizen Lab confirmed in 2021–22 that Pegasus had been used against lawyer Roman Giertych, prosecutor Ewa Wrzosek and senator Krzysztof Brejza, whose phone was infiltrated 33 times between April and October 2019 while he ran the opposition's parliamentary election campaign; stolen messages were later doctored and broadcast by state television. PiS leader Jarosław Kaczyński acknowledged in January 2022 that Poland had bought Pegasus. In April 2024 Prosecutor General Adam Bodnar said Pegasus had been used against 578 people between 2017 and 2022 by three agencies: the Central Anticorruption Bureau (CBA), Military Counterintelligence and the Internal Security Agency.","tactics":[{"code":"TC-21","role":"primary","label":"Surveillance Infrastructure / Spyware Deployment","needs_review":false},{"code":"TC-16","role":"secondary","label":"Confidential Data Leak and Broadcast","needs_review":false}],"version":1,"channels":["Covert spyware infection (Pegasus)"],"entities":[{"id":1163,"name":"Central Anticorruption Bureau (CBA), Military Counterintelligence Service, Internal Security Agency (ABW) under the PiS government","role":"actor","entity_type":"Security Apparatus"},{"id":1164,"name":"Opposition senator Krzysztof Brejza (Civic Coalition election campaign chief), lawyer Roman Giertych, prosecutor Ewa Wrzosek and others — 578 people in total, 2017–2022","role":"target","entity_type":"Individual — Politician / Lawyer / Prosecutor"}],"date_text":"2019","created_at":"2026-09-25T12:58:50.19638+00:00","escalation":5,"harm_track":"Track 3 — Operational Suppression","narratives":[],"report_ids":[],"signal_ids":[],"updated_at":"2026-09-25T12:58:50.19638+00:00","occurred_on":"2019-01-01","campaign_ids":[],"enabler_type":"","response_ids":["CR-POL-001"],"trigger_type":"TR-08: Proactive / Ambient","campaign_phase":"","civic_response":"Victims went public with Citizen Lab forensics; a Senate special committee heard evidence (2022). | Outcome: after the change of government the Sejm set up a Pegasus investigative committee (17 January 2024) and the Prosecutor General disclosed the scale of use (578 people) and notified victims.","date_precision":"year","enabler_status":"","campaigns_served":[],"consequence_category":"Operational Suppression","institutional_consequence":"Data seizure/exposure; Stolen data leaked and broadcast; Chilling effect"}