Germany’s federal cybersecurity agency (BSI) has raised alarms after learning that several members of the Bundestag, along with other prominent individuals, may have been targeted by spyware. Notifications recently issued by Apple suggest these individuals could have been under cyberattack. Authorities are treating the alerts with utmost seriousness.
According to the BSI, the issue began when some lawmakers received “threat notifications” from Apple—warnings that the tech company sometimes sends to users suspected of being targeted by spyware. While Apple stops short of naming who attacked or whether the intrusion was successful, the notices indicate a potential compromise. Officials say anyone seeing this notification should assume their device might be infected and act accordingly.
What the Notifications Reveal
The warnings from Apple refer to “so-called threat notifications,” triggered when spyware capable of stealing message content, tracking location, and accessing other sensitive data is thought to be active. Some of these spyware tools depend on “zero-click exploits”—attacks that don’t require a user to open a link or file, making them particularly dangerous and stealthy.
While the BSI confirmed the Bundestag has received alerts, details remain scant: no names have been made public, not even on whether Chancellor Friedrich Merz’s devices are implicated. The government says it is assessing the situation, but there’s no word yet on what, if any, mitigation has been undertaken.
Who Else Might Be Affected
This isn’t just a German concern. Apple reportedly sent similar threat notifications to users in 99 countries as part of its latest sweep. One individual in Beirut, a filmmaker who had been attacked in 2021, shared they received a fresh alert. These messages come amid rising reports of misuse of spyware tools by nation-states or private vendors known as “mercenary spyware” creators.
Germany itself has been entangled in spyware controversies before: its central criminal federal agency is said to have acquired access to Pegasus, a surveillance tool developed by the firm NSO Group, in 2019. The current alerts have once again highlighted the murky world of digital espionage.
What this means: The incident underscores growing global concern about spyware—the kind that can slip onto devices silently. For public officials especially, such breach risk threatens privacy, national security, and public trust.
Analysis: This episode brings several issues into sharp focus. First, it shows both how advanced spyware tactics—especially zero-click exploits—have become, meaning even cautious users are vulnerable. Second, it emphasizes the opaque ecosystem of government surveillance tools: who uses them, how, and under what oversight. For Germany, the implications extend beyond technical threats to questions of policy, transparency, and accountability. In the coming days, the public will be watching how the government responds—not just in identifying who was affected, but in offering protections and clearly communicating the risks to citizens and officials alike.
