ANALYSIS How the Hungarian diploma became an "open book" for Moscow: the Szijjártó–Panyi scandal, the interception allegations, and the stakes for EU and NATO security

The Hungarian diplomacy is going through one of the most serious credibility crises since the country joined the European Union and NATO. On one hand, recent investigations claim that Foreign Minister Péter Szijjártó has been transmitting confidential information from EU diplomatic meetings to Moscow for years; on the other hand, the same government accuses investigative journalist Szabolcs Panyi of "espionage," who has become a symbol of the Pegasus scandal after his phone was infected with military spyware.

The intertwining of these two stories – the alleged deliberate leaks to Russia and the abusive use of surveillance tools against journalists – raises an essential question for Western partners: how much longer can they trust Hungary as a security ally? While European institutions demand urgent explanations from Budapest, and some capitals begin to restrict Hungary's access to classified information, the Szijjártó–Panyi case becomes a test of the EU and NATO's ability to protect their own decision-making processes in the face of a member increasingly perceived as a weak link in the chain.

Old suspicions, new evidence: what is being accused of Péter Szijjártó

The investigation that triggered the current wave of reactions stems from revelations published by the Washington Post and reiterated by the European press, according to which Péter Szijjártó has been regularly informing the Russian side about the internal discussions of EU foreign ministers. Security sources cited under anonymity claim that the Hungarian minister was in contact with his Russian counterpart Sergei Lavrov during breaks at meetings in Brussels, providing "direct reports" about the positions of member states and negotiations regarding sanctions and aid for Ukraine.

A European official, quoted by Euronews, described the situation as "deeply concerning," reminding that discussions within the Council are by definition confidential, and states are bound by the principle of "loyal cooperation." Investigations show that suspicions regarding leaks from Budapest had been circulating for some time among certain Western capitals, which has already led to some adjustments in how sensitive information is handled.

Budapest's official reaction has been defensive. Szijjártó labeled the articles as "fake news" and "conspiracy theories," claiming they are politically motivated and aim to influence the elections in Hungary. The Minister for European Affairs, János Bóka, suggested that it is "perfectly normal" for a head of diplomacy to discuss with his counterparts, including Lavrov, rhetorically questioning why other ministers would not do the same. At the same time, Szijjártó acknowledged in a video intervention that he speaks "regularly" with Lavrov "before and after" European meetings, but insisted that he did not disclose sensitive information and that he is a victim of an orchestrated media campaign. However, the ambiguity remains at the level of the content of these conversations – an essential detail for assessing the security risk.

Valuable goods from Russia with Orban's government planes

Now investigative journalist Szabolcs Panyi has published new information about the Viktor Orban government's relations with Russia, claiming that the country's official planes have been making suspicious transports from Russia for several years. According to the journalist's investigations, information about these flights began circulating within the national security services of several EU and NATO member states as early as 2016-2017. He specifies that he obtained confirmations from officials from at least six countries, which indicated that Hungarian aircraft returned from Russia with valuable goods.

The Pegasus file: when a journalist's phone becomes a weapon

In 2021, the Pegasus scandal revealed that Hungary is among the few EU states that have used military spyware against journalists, lawyers, and political opponents. An investigation coordinated by Direkt36, in collaboration with the international consortium Pegasus Project, showed that Szabolcs Panyi's phone was repeatedly infected, especially during periods when he documented sensitive topics related to Russian influence and the government's controversial contracts.

Analyses conducted by Amnesty International and technical partners confirmed traces of Pegasus on Panyi's device while he was working on materials regarding the International Investment Bank, Budapest's ties with Moscow, and the relationship with the American administration. Pegasus allows full access to the content of a smartphone – messages, emails, contacts, location – and can turn the phone into an ambient microphone, capturing conversations nearby without the user being aware.

The Hungarian government initially avoided responding substantively, invoking "state secrets." Later, a Fidesz official and the Minister of the Interior admitted that the state had purchased and used Pegasus, insisting, however, that everything was conducted "within the limits of the law" and that the content would represent "risks to national security." The targeted journalists, including Panyi, have sued the state, and organizations such as CPJ, International Press Institute, and Media Freedom Rapid Response have warned that using a tool created to combat terrorism against newsrooms can have a "chilling effect" on investigative journalism.

From Pegasus victim to "spy": the bridge between 2021 and 2026

In 2021, Panyi was publicly presented as a victim of an abuse of power: an investigative journalist surveilled by his own state with the help of Pegasus while investigating Budapest's ties with Moscow. Press freedom organizations were already warning then that if a government treats a reporter as a legitimate "adversary" for military spyware, the next step could be the direct criminalization of his work.

Now, in 2026, this red line has been crossed: Panyi is no longer just a victim of surveillance but also a victim of a "spy case in cooperation with a foreign state", built around a secretly recorded, edited recording in which he checks a phone number attributed to Péter Szijjártó. The journalist categorically denies the accusations, stating that he has never engaged in espionage and describes the case as "unprecedented in an EU state" and close to "Soviet manuals."

The International Press Institute "strongly condemns" these accusations, calling them "an alarming escalation of pressure on the press ahead of elections" and explicitly reminding that Panyi was already a victim of Pegasus in 2019, seeing the current case as a continuation of the same logic of intimidation. Platforms like Media Freedom Rapid Response and other regional networks warn that if a case of this type remains unpunished, investigative journalists across the region will be tempted to avoid topics that touch on security and relations with Russia, for fear of being accused of collaborating with foreign services.

The espionage case against Panyi: Budapest's arguments and press reactions

Hungarian authorities claim that Szabolcs Panyi "spied against his own country in cooperation with a foreign state," presenting him as an example of an alleged "network of agents" operating under the cover of journalism. In a briefing, Orbán's chief of staff, Gergely Gulyás, stated that the journalist used "the pretext of press work" to provide information to a foreign power, suggesting that it would be Ukraine.

The central point of the accusations is an audio recording, made without Panyi's knowledge and broadcast by government-friendly media, in which he discusses with a source about checking a phone number associated with Szijjártó, in the context of an investigation into the minister's conversations with Lavrov on the margins of EU meetings. The government claims that through such discussions, the journalist would have exceeded the limits of the profession and entered the realm of espionage, but does not publicly present evidence regarding the actual transfer of information to a foreign service.

Panyi and the newsrooms he works with reject this interpretation. In a widely quoted statement, he asserts that "accusing investigative journalists of espionage is completely unprecedented in the 21st century in a European country" and that what the government is doing "is typical of Putin's Russia or Belarus." The VSquare platform called the case "an authoritarian tactic meant to discredit investigations about ties with Russia" and emphasized that the entire case stems from a selectively edited conversation.

The International Press Institute calls on Hungarian authorities to drop the accusations, to cease the "legal harassment" of the press, and to guarantee that no journalist will be prosecuted for their legitimate work. Other networks, such as Media Freedom Rapid Response, speak of an "intimidation effect" meant to silence any investigation that touches on security, intelligence services, or the government's external ties.

Intercepts, leaks, and cracks in European trust

Beyond the legal dispute, the main stake shifts to the level of trust between allies. The security of EU and NATO decisions relies on the assumption that all member states respect the confidentiality of deliberations and protect their own communication channels. In Hungary's case, two levels of vulnerability overlap: possible voluntary leaks from Szijjártó to Moscow and the abuse of surveillance technologies against journalists and other internal targets.

Reports on how intercepts are authorized in Hungary show that services can monitor a large number of people with limited external control, mainly at the level of the Ministry of Justice, without the intervention of an independent court. In practice, this means that a phone present in the vicinity of EU meetings or officials – whether of a journalist or a diplomat – can become a technical gateway for capturing sensitive information.

Against this backdrop, the accusations that Szijjártó has been deliberately leaking internal deliberations to Lavrov are perceived as a shift from technical vulnerability to deliberate political leaks. The European Commission has explicitly pointed out that such practices are "deeply concerning" and violate the principle of mutual trust on which the functioning of the Union is based.

How the EU and NATO are reacting

The European Commission has officially asked Budapest to clarify the "very concerning reports" regarding possible leaks of information to Russia, insisting on the importance of "loyal cooperation" among member states. Spokespersons reminded that "the relationship of trust between member states and EU institutions is fundamental," suggesting that the lack of convincing explanations could have political and institutional consequences.

Reports from outlets like France 24 and Euronews indicate that certain flows of classified information have already been restricted in relation to Hungary, as a precautionary measure following the emergence of the revelations. Security experts cited by these channels speak of an increasingly pronounced "compartmentalization": documents distributed in a more general form, technical briefings held in restricted formats, sensitive discussions organized in smaller circles of "trusted allies."

In NATO, discussions are less visible publicly, but the logic is similar. If a member state is perceived as a possible vector for leaks to Moscow, allies may decide, formally or informally, to limit its participation in certain discussions regarding military planning, cyber operations, or intelligence assessments. Such an evolution would transform Hungary into a de facto member with limited access to the informational core of the Alliance, even if its formal status remains unchanged.

Why now: elections, Ukraine, and pressure from Moscow

The timing of these scandals overlapping is not coincidental. Hungary is entering an electoral campaign in which Viktor Orbán faces a serious challenge from a consolidated opposition, and the theme of the relationship with Russia is central to public debate. At the same time, new support packages for Ukraine are being discussed in Brussels, sometimes blocked or delayed by Budapest, which amplifies the perception that Orbán is using his EU membership position as a negotiating lever with both parties – Brussels and Moscow.

Analysts cited by Euronews, France 24, and other channels interpret the revelations about Szijjártó and the Commission's tough reaction as part of a broader strategy to limit Russia's influence from within the Union and to send a clear signal that deliberate leaks will not be tolerated. Domestically, the espionage case against Panyi can also be read as an attempt by the government to change the narrative: from "Hungary vulnerable to Russian influence" to "Hungary a victim of foreign espionage and hostile press."

Scenarios for EU and press security

 The fact that Brussels has begun to restrict Hungary's access to classified information and to move sensitive discussions into smaller formats shows how serious the risk is perceived that strategic details about Ukraine, sanctions, or military planning could reach Moscow.

Thus, at the European level, one scenario is the consolidation of the tendency to treat Hungary as a member with limited access to sensitive information, with key discussions held in alternative formats. This could protect deliberations regarding sanctions, military support for Ukraine, and intelligence cooperation, but risks deepening divisions within the EU and fueling anti-Brussels rhetoric in Budapest.

A second scenario concerns the acceleration of European regulation regarding spyware and surveillance. Reports from the European Parliament regarding Pegasus already demand firm guarantees against the use of such tools against journalists and opponents, real judicial oversight, and audit mechanisms for national services. The Hungary case could become the concrete example used to argue for the rapid adoption of these measures.

In terms of press freedom, the Panyi case sends a cold message to the media ecosystem in the region: investigations at the intersection of security, services, and Russia can have severe personal costs. For the EU and NATO, the dilemma is thus double: how to manage a member suspected of leaks to Moscow while simultaneously reacting when the same member treats investigative journalism not as a democratic resource but as a security threat.

*****Synthesis made with the help of a data monitoring flow provided by the media monitoring platform NewsVibe Romania. The analysis, data, and images presented have been enhanced with the help of Machine Learning and Artificial Intelligence tools.