Historical record Record 2021-005

2021 World Events · Pandemic shock, supply-chain compromise, and high-intensity war

Pegasus spyware revelations

Investigations alleged widespread targeting of phones with Pegasus spyware.

Read the record View in 2021 chronology Compare this record

Evidence-led reading

What is stated, why it matters, and what remains uncertain

What this is

A specific-event record selected from the protected World Events source ledger for cross-year research. It is not an exhaustive account of 2021.

Why it matters

It exposed commercial spyware as a transnational repression and intelligence tool.

What is established here

The page faithfully exposes the submitted record and its source boundary. No claim-level evidence packet has yet upgraded the record beyond a research starting point.

What remains uncertain

Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.

Record narrative

Source-bounded summary

Investigations alleged widespread targeting of phones with Pegasus spyware.

Why the ledger includes it

It exposed commercial spyware as a transnational repression and intelligence tool.

Structured fields

Record at a glance

Stable record ID: 2021-005
Date or period: 2021-07
Type: Espionage / surveillance
Focus: Espionage / cyber
Impact scope: Global
Priority: 5 of 5
Location label: Global cyberspace, Global
Coordinate precision: Cyberspace: no single coordinate
Actors named by the source record: NSO Group customers; journalists; activists; governments
Verification state: source-start-point; sensitive details require independent verification

Geographic context

A coordinate locator, not a surveyed event footprint

No supportable coordinate is supplied for this record. The location label remains descriptive rather than geospatial.

Review location and coordinate boundaries

Coordinate unavailableThe archive will not invent a point where the source record does not support one.

Source and verification boundary

This remains a starting-point record

Starting-point source from the submitted dataset; verify exact dates, attribution, legal posture, casualty figures, and current status before reuse.

Open starting-point source Find independent archives

Structured comparison set

These links use exact focus, event-type, location-label, impact-scope, and nearby-year fields. They do not claim causation, coordination, equivalence, or a single historical narrative.

20132013-06 onward

Edward Snowden disclosures

Same research focus
Same location label
Same impact scope

Leaked documents exposed extensive U.S. and allied surveillance programs and intelligence partnerships.

Open comparison record Compare both

20212021-03

Microsoft Exchange Hafnium campaign

Same location label
Same impact scope
Nearby year

Attackers exploited Microsoft Exchange Server vulnerabilities at scale before patches were widely applied.

Open comparison record Compare both

20202020-03-11

WHO characterizes COVID-19 as a pandemic

Same location label
Same impact scope
Nearby year

On March 11, 2020, WHO assessed that COVID-19 could be characterized as a pandemic and reported more than 118,000 cases in 114 countries and 4,291 deaths.

Open comparison record Compare both

20232023-05 onward

MOVEit mass exploitation

Same location label
Same impact scope
Nearby year

Attackers exploited MOVEit Transfer vulnerabilities to steal data from many organizations.

Open comparison record Compare both

Citation and correction

Use the stable record ID and challenge individual propositions

A correction may concern the date, place, actors, attribution, legal status, figures, coordinate precision, source characterization, or why-pivotal summary without invalidating every other field.

Suggested citation

2IA — International Intelligence Archive. “Pegasus spyware revelations.” World Events record 2021-005. Reviewed July 27, 2026. https://2ix.org/world-events/2021/2021-005/

Submit a correction Read methodology