“It is not a supposition, they are facts of enormous gravity,” the minister of the presidency, Félix Bolaños, said, confirming the news.
“We are absolutely certain that it was an external attack… because in Spain, in a democracy like ours, all such interventions are carried out by official bodies and with judicial authorisation,” he said.
“In this case, neither of the two circumstances prevailed, which is why that we have not doubt that it was an external intervention. We want the justice to investigate,” Bolaños said.
He did not say whether the Spanish authorities had any indication yet where the attack originated from or whether another country was behind it.
Bolaños said that Sánchez’s phone had been tapped in May 2021 and Robles’ in June of the same year.
“A determined amount of data” was extracted from both phones, he added.
“There is no evidence that there was other tapping after those dates.”
Pegasus spyware silently infiltrates mobile phones to extract data or activate a camera or microphone to spy on their owners.
The Israel-based NSO Group, which owns Pegasus, claims the software is only sold to government agencies to target criminals and terrorists, with the green light of Israeli authorities.
The company has been criticised by global rights groups for violating users’ privacy around the world and it faces lawsuits from major tech firms such as Apple and Microsoft.
Catalan separatists have accused Spain’s intelligence services of using spyware to snoop on their mobile phones, reviving tensions with Sánchez’s minority leftist government, which relies on their support to pass legislation.