Paz Esteban will be replaced as head of Spain’s CNI intelligence agency.

This is part of the country’s spy chief as part of a widening scandal over the hacking of the mobile phones of the prime minister and Catalan separatist leaders.

“Full security does not exist, we have a series of threats regarding security which get bigger each day,” said Defence Minister Margarita Robles whose ministry oversees the agency.

Esteban appeared before a parliamentary committee for questioning on Thursday over the phone-hacking scandal which has dominated headlines for days.
She confirmed that 18 Catalan separatists, including Pere Aragones, the head of Catalonia’s regional government, had been spied on by the CNI but always with court approval.

The scandal broke in April when Canadian cyber security watchdog Citizen Lab said the phones of over 60 people linked to the Catalan separatist movement had been tapped using Pegasus spyware after a failed independence bid in 2017.
The affair has sparked a crisis between Sanchez’s minority government and the Catalan separatist party ERC. Sanchez’s fragile coalition relies on the ERC to pass legislation in parliament.

The scandal deepened after the government announced on May 2 that the phones of Sanchez and Robles were hacked by the same spyware, made by Israel’s NSO group, in May and June 2021.

Sanchez is the first serving head of government confirmed to have been targeted by controversial Pegasus spyware.
The revelation raised questions over who is to blame and whether Spain has adequate security protocols.

Interior Minister Fernando Grande-Marlaska’s phone was also among those hacked last year, government spokeswoman Isabel Rodriguez said Tuesday after all cabinet minister’s phones were analysed.
“Since then there are no traces of Pegasus infections” on the phones of cabinet ministers, she told a joint news conference with Robles.

The Israel-based NSO Group, which owns Pegasus, claims the software is only sold to government agencies to target criminals and terrorists, with the green light of Israeli authorities.

The company has been criticised by global rights groups for violating users’ privacy around the world and it faces lawsuits from major tech firms such as Apple and Microsoft.
Amnesty International, the London-based rights group, said the software has been used to hack up to 50,000 mobile phones worldwide.