Polish Prime Minister Donald Tusk on Monday called the use of Israeli-made Pegasus spyware by the previous government a “crime against the state” after prosecutors confirmed that sensitive data on Polish citizens was transferred outside Poland, potentially exposing it to the Israeli manufacturer NSO Group.

A parliamentary investigative committee on Monday presented findings confirming that information gathered by Polish services using Pegasus could have reached Israel. Witold Zembaczyński, a member of the Sejm committee investigating Pegasus, said on Tuesday that all data collected by the system was stored on Israeli servers, describing it as “Israel’s largest intelligence operation in the history of the state.” He added that the system vacuumed up tens of thousands of sensitive records—emails, text messages, photos, and location data—without judicial oversight.

Tusk accused the former Law and Justice (PiS) government of exposing thousands of citizens’ private details to Israel without oversight, calling it one of Poland’s biggest post-communist scandals. Zembaczyński noted that the number of surveilled individuals was far higher than the previously cited 578, but victims’ names would not be disclosed to avoid secondary victimization.