The CNI spied on Carles Riera and David Fernàndez for alleged "activities contrary to national security". The agency had the phones of the two former CUP deputies infected with Pegasus for almost two years and six months, respectively, and had the authorization of the Supreme Court.