The catalan MEPs also were targeted with Pegasus, and I don't remember the details but at that time the only client were nation states, so Spain was the one to hire the service. Nothing happened.