Orbán Lost. His Surveillance Machine Didn't.

Hungarian Parliament building in Budapest illuminated at night reflecting on the Danube river — Photo via Unsplash

TL;DR: Viktor Orbán conceded defeat on April 12, 2026, ending 16 years in power. Péter Magyar’s Tisza Party won 138 of 199 parliamentary seats, a constitutional supermajority. That means Magyar can rewrite Hungary’s constitution, reform the judiciary, and restructure intelligence agencies. But Orbán spent a decade and a half stacking every institution with loyalists: the Constitutional Court, the public prosecutor’s office, the Fiscal Council, the national bank, and the intelligence services that bought Pegasus, renewed Webloc licenses, and filed espionage charges against the journalists who exposed them. A supermajority gives Magyar the legal power to dismantle the surveillance state. Whether he actually does it is the question that matters now.

The Numbers

It wasn’t close.

Tisza took 53.6% of the vote and 138 seats in Hungary’s 199-seat parliament. Fidesz got 37.8% and 55 seats [1]. Voter turnout hit the highest level since the 1990s. Viktor Orbán conceded defeat on election night, the first time he’s lost since returning to power in 2010 [2].

J.D. Vance flew to Budapest days before the vote to stump for Orbán, calling him “wise and smart” [3]. Hungarian voters disagreed.

The European Parliament had already labeled Hungary a “hybrid regime of electoral autocracy” in 2022 [3]. What makes this election remarkable isn’t just that the autocrat lost: it’s that he lost within a system he rigged. Gerrymandered districts. State-controlled media. Government-connected oligarchs funding the campaign. And he still got crushed.

What Magyar Inherits

Here’s the surveillance infrastructure that Magyar’s government now controls. All of it was built or acquired under Orbán:

Webloc: Six licenses renewed in March 2026. Tracks hundreds of millions of phones using advertising data. No warrant required. Operational since at least 2022 [4]
Cobwebs/Tangles: Dozens of web scraping and social media surveillance licenses. Monitors online activity in real time [4]
CoAnalyst: Nearly two dozen data analytics licenses for processing intelligence data [4]
Blockchain analysis module: Cryptocurrency transaction monitoring [4]
Pegasus successor: VSquare reported Hungary is developing zero-click spyware after an earlier homegrown system called Quvasz failed [4]
NBSZ apparatus: Hungary’s Special Service for National Security distributed these tools to partner agencies across the intelligence and law enforcement landscape [4]

This is what €6 million in Pegasus contracts, years of Cobwebs procurement at 300% markups through government-connected broker SCI-Network Ltd., and zero oversight built [4][5].

A Supermajority Is a Sledgehammer. Will He Swing It?

Two-thirds of parliament means Magyar can amend the constitution. That’s the same power Orbán used to reshape Hungary’s entire institutional framework after 2010. Magyar can use it to undo it.

Specifically, a supermajority lets him [6][7]:

Rewrite surveillance oversight laws that are “far too lax,” according to investigations into Hungary’s Pegasus abuse [5]
Replace the heads of the NBSZ and restructure intelligence agency accountability
Reform the Constitutional Court, which is stacked with Fidesz appointees on extended terms
Overhaul the public prosecutor’s office, which never investigated Pegasus targeting of journalists
Cancel or audit Webloc and Cobwebs contracts
Apply to join the European Public Prosecutor’s Office, something Orbán refused to do [7]

Magyar has already pledged “zero tolerance for corruption” and asset checks going back 20 years [7]. He’s accused Orbán’s intelligence services of targeting his own party’s IT systems [8]. And he’s pledged to hold “both the political figures who commissioned these actions and the heads of the secret services” accountable before the Hungarian judiciary [8].

Those are the right words. Poland said the right words too.

The Poland Problem

Poland’s experience is the cautionary tale.

When Donald Tusk’s coalition took power in December 2023, replacing eight years of PiS party rule, expectations were high. The new government would restore judicial independence, reform media governance, and dismantle the surveillance apparatus.

Two years later, Poland’s reform agenda is stuck in institutional quicksand. PiS-appointed judges refuse to accept their replacements. The Constitutional Tribunal ruled reform efforts unconstitutional, using the very judges whose legitimacy the reforms were supposed to address. And PiS had less institutional capture than Fidesz [6].

Hungary’s version is deeper. Orbán had 16 years and supermajorities of his own. The loyalists he installed have extended terms designed to outlast any single election. The Fiscal Council (composed of Fidesz appointees running the national bank, State Audit Office, and Fiscal Council presidency) can reject Magyar’s budget. If they do, the president (also a Fidesz loyalist) can dissolve parliament and force new elections [6].

That’s the trap. Orbán lost the election but his people still hold the institutional veto points.

Will Panyi Get Justice?

Szabolcs Panyi is the journalist who helped expose Webloc, who was targeted with Pegasus in 2018-2019, and who the Orbán government charged with espionage in March 2026, weeks before this election [9][10].

His alleged crime? Sharing the phone number of Foreign Minister Péter Szijjártó with an EU intelligence service. Panyi called the charges “virtually unprecedented in the 21st century for an EU Member State. This is typical of Putin’s Russia, Belarus, and similar regimes” [10].

The timeline tells you everything: spy on journalist with Pegasus, journalist exposes your next-gen surveillance tools, charge journalist with espionage.

A new government can drop those charges. A new government can investigate who authorized Pegasus targeting of journalists and political opponents. A new government can open the NBSZ’s procurement records and tell Hungarians exactly who was tracked, for how long, and on whose orders.

Whether Magyar does any of this will be the first real test of whether this election changes anything for surveillance in Hungary.

Brussels Has No Excuse Now

The EU froze nearly €22.5 billion in development funds over rule-of-law concerns [3]. When Orbán was running the show, Brussels could hide behind the excuse that Hungary’s government was uncooperative.

That excuse is gone.

Magyar campaigned on “choosing Europe.” He’s committed to eurozone membership by 2030 [7]. EU leaders have been restricting classified information from Hungary due to suspected intelligence leaks to Russia [4]. A new government could rebuild that trust.

But here’s what the EU still hasn’t done: enforce GDPR against Hungary’s mass surveillance. Webloc tracks hundreds of millions of phones through advertising data, an open violation of data protection regulations. Hungary’s NAIH never investigated. Brussels never forced the issue. No fines. No infringement proceedings. Nothing [4].

With a cooperative government in Budapest, the EU could finally establish that GDPR applies to government surveillance programs. That member states can’t claim “national security” as a blanket exemption from the privacy rights of hundreds of millions of people.

Will they? After years of watching Hungary deploy Israeli spyware against journalists and mass-tracking tools against its own citizens without consequence, the smart money says no.

What to Watch

The next six months will tell us whether this election was a turning point or a regime change that leaves the surveillance tools intact:

Panyi charges: Does Magyar’s government drop the espionage case against the journalist who exposed the surveillance?
NBSZ leadership: Does Magyar replace the heads of the intelligence service and audit their surveillance contracts?
Webloc licenses: The six licenses renewed in March 2026 are active. Does the new government cancel them, let them expire, or keep using them?
Pegasus investigation: Will there be a formal inquiry into which journalists, opposition figures, and civilians were targeted?
Fiscal Council trap: Can Magyar pass a budget by March 2027 without Fidesz-appointed veto holders dissolving parliament?
EU funding: Will Brussels release the €22.5 billion in frozen funds? And will they condition it on surveillance reforms?

The Bottom Line

Orbán lost. That’s historic. The longest-serving authoritarian in modern European history, voted out in an election he rigged, by margins he couldn’t steal.

But surveillance infrastructure doesn’t have elections. The Webloc licenses don’t expire because Fidesz lost. The NBSZ officers who bought the tools don’t resign because a new party won. The Cobwebs contracts, the CoAnalyst dashboards, the Pegasus successor under development, all of it transfers to the next government.

The question was never whether Hungary could vote out Orbán. The question is whether any government, even one with a constitutional supermajority, can vote out the surveillance state he built.

Poland tried. It’s still trying. Hungary’s version is worse.

References

Published: April 13, 2026