Skip to content
Submit incident
AII-1000-68049
Under investigationA regulator, court or police has opened a formal inquiry and reached no finding yet.

Hungarian authorities used Israeli spyware for mass surveillance

Investigators reportedly found that Hungarian intelligence and law enforcement agencies secretly used Israeli spyware called Webloc to conduct mass surveillance on hundreds of millions of people through advertising data, potentially violating EU privacy law. Hungary was the first confirmed EU country to deploy this technology, and licenses were renewed in March 2026 shortly before elections.

9 April 2026 · Hungarian government · Privacy and surveillance
9 April 2026
AII-1000-680493 sources ↓
Quick facts
Category
Privacy and surveillance
Country
Hungary
Source
hvg.hu
Date
9 April 2026
Drafted by
Raidu Incident Detection

What happened

Hungarian intelligence and law enforcement agencies secretly used Webloc, mass surveillance software developed by Israeli company Cobwebs Technologies, to track hundreds of millions of people through smartphone advertising data, according to investigation by VSquare and Citizen Lab.

Hungary became the first confirmed EU country to deploy this technology. Licenses for Cobwebs systems were renewed in March 2026, shortly before the April 12 parliamentary elections.

Reported impact

The use of these systems raises the possibility of GDPR violations, as the regulations fundamentally prohibit such use of personal and advertising data.

Index analysis

The investigation also identified domestic intelligence tools linked to SCI-Network Kft., the company that obtained Cobwebs licenses for the government. The company received public funding to develop a Hungarian-developed intelligence platform called Quvasz or Q-VASZ, which was considered a failure by many: it was technically weaker than market alternatives and intelligence services rarely used it.

Governance controls

According to some sources, SCI-Network spyware was capable of zero-click attacks; other sources emphasized serious flaws in the system, noting it left easily detectable traces on infected devices and quickly drained phone batteries, suggesting poorly written malware.

Classification

Category
Privacy and surveillance
Industry
Government, security and defence
Country
Hungary
Harm status
Actual harm
Intent
Intentional
Timing
Unknown
Harm types
Human or fundamental rights
Harmed
General public
AI systems
Webloc, Cobwebs AI intelligence systems, Quvasz or Q-VASZ, SCI-Network spyware tool
Regulations
GDPR (cited)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

hvg.hu
VSquare: egy új izraeli kémprogramot használ az Orbán-kormány, bár az EU-s szabályok szerint nem tehetné
9 April 2026
hirstart.hu
Vsquare: Több milliárdot költött a magyar állam egy Quvasz nevű hírszerző eszközre, ami végül óriási bukta lett
9 April 2026
kontroll
Illegális kémszoftvert is bevethettek a lakosság ellen...
10 April 2026