//
OFFLINE — VIEWING CACHED CONTENT
← Back to Archive

IC BRIEF

Current as of 0406 EDT (UTC-04), Tuesday 15 September 2026

Contents

10 stories from 52 sources across 44 organizations

KEY JUDGMENTS

European counterintelligence services are accelerating prosecution and attribution of Russian intelligence networks, a tempo likely to produce formal actions by at least two NATO member states by October 31. Moderate confidence rests on converging signals: Germany paired the Ilona W. indictment with expulsion of the Russian deputy military attaché, Latvia faces pre-election pressure after public identification of the Foreign Intelligence Service (Russia) (SVR) station chief in Riga, and Militärischer Abschirmdienst (German Military Counter-Intelligence Agency) (MAD)'s first mandated annual report framed the Bundeswehr as a prioritized Russian target. Latvian action before the October 3 vote would confirm the trajectory.

CIA Director Ratcliffe's engagement with Russian counterparts on Ukraine peace terms will very likely continue through the same window, given Trump's on-record confirmation and the August Ratcliffe-Naryshkin contact. The assessment carries moderate confidence absent a formal negotiating mandate. European CI actions naming Russian officers will strain but not sever this channel, given Moscow's pattern of insulating diplomatic channels from espionage friction.

Domestically, Brennan's grand jury testimony is unlikely within 60 days after diGenova's resignation created grounds for delay and a motion to quash. DOJ's first successful use of the Alien Terrorist Removal Court will likely produce additional Alien Terrorist Removal Court (ATRC) filings within 12 months, converting a dormant statute into an active classified-evidence removal channel with untested constitutional standing.

Counterintelligence

FBI Charges Chinese Businesswoman With Gathering Intelligence From US Government Officials for Shanghai Intelligence Bureau

BLUF: Jin's detailed admissions and recovered communications likely yield a guilty plea by March 2027, but the deeper signal is Detroit's maturing counter-Ministry of State Security (China) (MSS) docket pressuring every US official with informal People's Republic of China (PRC) business ties.

Federal prosecutors in the Eastern District of Michigan charged Di Jin, 41, on September 11 with acting inside the United States under the direction or control of a foreign government without notifying the attorney general 12. According to the FBI affidavit, sworn by Special Agent Robert Holbrook, CBP officers stopped Jin at Detroit Metropolitan Airport on September 8 after she flew in from Shanghai and confronted her with an April message in which she wrote that "Xi's team" had tasked her on procurement, rare earth metals, Treasury bonds, and tariff exemptions 13. Jin admitted during subsequent FBI interviews that she conducted intelligence-gathering work in the US on behalf of PRC officials who in turn assisted her business interests in China, and described contact with the Ministry of State Security's Tianjin bureau dating to 2012 and with Shanghai intelligence officers since February 2024, including US trips in 2024, June 2025, and March 2026 to meet officials identified in the complaint as Government Contacts 1 through 4 123. Phone searches recovered a July 2024 text in which Government Contact 1, described as an 81-year-old US government official, questioned whether Jin was under Chinese surveillance and expressed concern about the appearance of disloyalty 12. DOJ database checks on September 10 found no record that Jin had registered as a foreign agent under Section 951, and she faces up to 10 years in prison if convicted 12.

Analyst Note: Detroit's counterintelligence docket, now eight federal cases since 2022, signals the FBI has institutionalized MSS "co-optee" tracking as a standing enforcement priority rather than episodic response, raising exposure for any US official maintaining informal contact with PRC-linked business travelers. Jin's admissions and the recovered Government Contact 1 texts give prosecutors a cooperating-witness posture that favors a negotiated resolution. Di Jin likely pleads guilty on the Section 951 charge within six months of her September 11 indictment, by March 11, 2027. This assessment is held with moderate confidence, reflecting that it rests on a single detailed affidavit without corroborating court-filing activity yet.

Sources:

1: FBI Affidavit Says Chinese Businesswoman Gathered Intelligence From US Government Contacts - The Bureau News

2: FBI busts Chinese national in latest Detroit counterintelligence case - The Spokesman-Review

3: Chinese Woman Admits to Gathering Intelligence in US for Beijing: FBI - The Epoch Times

"Xi's Team Came to Her": FBI Affidavit Says Chinese Businesswoman Gathered Intelligence From U.S. Government Contacts - Todayville

NATO Commander Tinder Romance Triggers Counterintelligence Investigation at Allied Maritime Command Over Suspected Russian Espionage

BLUF: Pending UK judicial review risks exposing NATO counterintelligence thresholds at a command central to tracking Russia's submarine and shadow fleet operations, regardless of whether espionage occurred.

A senior Spanish naval officer at NATO's Allied Maritime Command in Northwood, Hertfordshire, was suspended and returned to Spain in summer 2025 after NATO and Spanish security officials opened separate counterintelligence investigations into his relationship with Janina White, a 49-year-old UK-Polish dual national born in Soviet Russia who lives in Romford, southeast London, according to Telegraph reporting on court documents 123. The married father of two, who had separated from his wife shortly before meeting White on Tinder in October 2024, drew scrutiny after White obtained a visitor pass to attend a Northwood Warrant Officers' and Senior Rates' mess Christmas event on December 12, 2024. Spanish authorities suspended his national security clearance in mid-2025, while the UK was not party to that process 34. Northwood's commander revoked the officer's access pass on June 19, 2025, and in August 2025 he and White were denied entry to the base and left after police were called without arrest 15. White has denied any espionage role, says no investigation has substantiated it, and told the Telegraph that during a St. Petersburg visit last month a man identifying himself as an Federal Security Service (Russia) (FSB) officer named Andrei questioned her for roughly two hours about the investigation and her former relationship 45. White has since filed a discrimination claim against the Ministry of Defence and is seeking judicial review of her designation as an "adverse security risk" 15.

Analyst Note: The case exposes a structural vetting gap at a command tracking Russia's shadow fleet and submarines: a partner's nationality and a single mess-hall visitor pass triggered parallel NATO and Spanish inquiries, yet neither service has substantiated espionage after nearly a year, a pattern that more plausibly reflects reflexive suspicion of a Soviet-born partner than any tradecraft indicator. Reporting rests on a single Telegraph investigation of court documents, with other outlets republishing rather than corroborating. The pending judicial review and discrimination claim will force disclosure of the evidentiary threshold used to suspend clearance and revoke access absent proven wrongdoing. White's account of an FSB approach in St. Petersburg, if accurate, suggests Moscow is tracking the fallout independent of her actual role, complicating any clean resolution of her status.

Sources:

1: Nato officers Tinder romance triggers security alert on UK military base over fears lover is Russian spy - GB News

2: Nato officer's Tinder romance triggers Russian spy concerns at UK base - LBC

3: NATO officer's dating app romance triggers security alert at UK military base: Report - Anadolu Agency

4: Tinder romance with Russian-born woman sparks NATO spy alert - Türkiye Today

5: Nato officer's Tinder romance sets off spy alert at UK base - Yahoo News

Nato officer's Tinder romance triggers Russian spy alert at UK base - The Telegraph

IC Oversight & Policy

DiGenova Quits Grand Conspiracy Probe After SCIF Dispute as Brennan Subpoenaed to Grand Jury

BLUF: DiGenova's exit transfers control of the Brennan prosecution to the very Washington attorneys he tried to exclude, making grand jury testimony unlikely within 60 days as legal challenges mount.

Joe diGenova resigned last Thursday from his post leading the Justice Department's "grand conspiracy" investigation in Fort Pierce, Florida, a day after a tense phone call with Attorney General Todd Blanche, according to two people familiar with the matter cited by CNN 1. CNN reported the final dispute centered on diGenova's effort to block Washington-dispatched lawyers from the probe, layered on earlier tension over his request for a dedicated Sensitive Compartmented Information Facility (SCIF) at the Fort Pierce office, which DOJ officials denied, directing him instead to an FBI facility miles away 1. The same day, diGenova signed a grand jury subpoena compelling former CIA Director John Brennan to testify in Fort Pierce on October 15, per a sworn declaration from Brennan's attorney Kenneth Wainstein 2. Prosecutor Kurt Olsen subsequently told Brennan's legal team that Brennan remains a "target" in a narrower false-statements probe and a "subject" in the broader conspiracy investigation, and that both tracks remain "viable" 12. NBC News reported DOJ officials had already lost confidence in diGenova's leadership before his departure, and Blanche told CBS News the investigation continues without him 23.

Analyst Note: DiGenova's exit hands the case to Washington-dispatched attorneys he fought to exclude, raising the odds of procedural challenges to the Brennan subpoena's timing and authorship, and Brennan's testimony is unlikely within 60 days as litigation over DOJ's preservation obligations and the leadership handoff creates grounds for delay or a motion to quash before October 15. High confidence rests on convergent original reporting from CNN and CBS News on the resignation's cause, the subpoena, and Brennan's target status, with NBC amplifying rather than adding sourcing. The dispute may reflect personal friction and turf battles over resources rather than a substantive rift on investigative strategy. If Brennan testifies on schedule, DOJ signals the incoming team can sustain subpoena timelines despite the leadership change and sustain charging pressure; delay instead hands his legal team grounds to press the preservation injunction and further stall any indictment.

Sources:

1: Exclusive: Tense phone call and resignation upend Justice Department probe into Trump's top foes - CNN

2: Former CIA chief John Brennan subpoenaed in Florida "grand conspiracy" probe - CBS News

3: Prosecutor who led 'grand conspiracy' probe of Trump targets resigns - NBC News

The Grand Conspiracy ... Adrift on a Skiff - emptywheel

Prior Reporting

Trump Confirms CIA Director Ratcliffe Is Involved in All Aspects of Ukraine Peace Talks After Meeting SVR Chief Naryshkin

BLUF: Washington's deliberate ambiguity over whether Ratcliffe, Witkoff, or Kushner leads the Ukraine negotiation gives Moscow no single channel to exploit or stall.

President Trump told reporters aboard Air Force One on September 13, en route from Ireland to the US, that CIA Director John Ratcliffe "is involved in everything" regarding the Ukraine peace talks and is "doing a great job" 123. Trump made the comment in response to a question about whether Ratcliffe would take on a more significant negotiating role 1. He also praised special envoy Steve Witkoff and son-in-law Jared Kushner as negotiators, citing the Gaza Strip settlement as an example of their work 123. The statement follows Ratcliffe's August 25 visit to Moscow, where SVR Director Sergey Naryshkin confirmed meeting him, and a CIA denial of Financial Times reporting that Ratcliffe was preparing for an expanded negotiating role 1.

Analyst Note: Trump's public folding of Ratcliffe into the negotiating apparatus, without naming him above Witkoff or Kushner, preserves ambiguity over who holds final authority on ceasefire or territorial terms, letting Washington run parallel intelligence and diplomatic channels that neither Moscow nor Kyiv can target with a single interlocutor. Naryshkin's confirmed August meeting indicates the CIA track runs alongside, not beneath, the Witkoff-Kushner channel, though Trump's equal praise for both in the same breath may instead reflect deflection of the expanded-role question rather than any hierarchy shift. This reverses prior White House denials of an expanded Ratcliffe role, on the record now but resting on a single TASS wire account of Trump's remarks, with Kommersant, Vedomosti, and Izvestia merely relaying rather than corroborating. Which channel carries weight will clarify once a substantive proposal, not a personnel comment, surfaces.

Sources:

1: CIA director involved in all aspects of Ukraine talks - Trump - TASS

2: Трамп подтвердил вовлеченность Рэтклиффа в переговоры по Украине - Vedomosti

3: Глава ЦРУ Рэтклифф вовлечен во все аспекты переговоров по Украине: заявление Трампа - Izvestia

Трамп: глава ЦРУ вовлечен во все аспекты переговоров по Украине - Kommersant

Prior Reporting

Alien Terrorist Removal Court Completes First-Ever Deportation Using Classified Intelligence Evidence After 30 Years of Existence

BLUF: DOJ's activation of a 30-year-old dormant court will likely yield additional classified-evidence removals within 12 months, though Zada's waiver left core due-process challenges unresolved for future defendants.

The Justice Department announced Friday that it secured the removal of Nazira Haji Zada, 47, an Afghan national from Fort Worth, Texas, marking the first-ever use of the Alien Terrorist Removal Court in its 30-year history 12. Court filings unsealed the same day show Zada conceded she was an "alien terrorist" and waived appeal rights on August 20, after DOJ filed its application on July 15 and ATRC Chief Judge Joan Ericksen presided over her July 30 hearing 13. Prosecutors alleged Zada supported an ISIS-inspired Election Day 2024 plot by her son and son-in-law, both previously convicted, using classified evidence her court-appointed attorneys said they were never permitted to review 13. Attorney General Todd Blanche said Friday the department "will do this more often," while Zada's attorneys stated her consent to removal "should not be seen as an endorsement of this court's legitimacy" 23.

Analyst Note: DOJ's success clears the path for routine use of the Alien Terrorist Removal Court, converting a dormant 1996 statute into an active removal channel that sidesteps criminal trial protections, with high confidence given Blanche's explicit public commitment paired with the precedent this case now sets for follow-on filings. DOJ likely will file at least one additional ATRC application and secure another classified-evidence removal within 12 months. Primary DOJ statements and independent secondary reporting converge on the timeline and DOJ's stated intent. Zada's waiver forecloses appellate review and leaves the court's constitutionality untested, since the administration may have selected this uncontested, evidentially thin case specifically to bank a precedent while avoiding judicial review. Immigration defense practitioners and Article III appellate courts must prepare for a recurring classified-evidence removal track if a second case follows; if none does, the constitutional question stays unresolved for future litigants.

Sources:

1: Department of Justice Removes Alien Terrorist in First Use of United States Alien Terrorist Removal Court - U.S. Department of Justice

2: Justice Department secures deportation through secretive 'Alien Terrorist' court - CNN

3: Alien Terrorist Removal Court deports legal US resident to Afghanistan in first-ever case - NPR

Secret court orders deportation of Afghan woman accused of terrorism - Jurist

Prior Reporting

Adversary Intelligence

Investigation Identifies Russian Presidential Administration Handler and SVR Station Chief Working to Destabilize Latvia Elections

BLUF: Latvia likely will move to expel or publicly attribute against at least one named Russian operative before the October 3 Saeima vote, now that cover identities are burned.

An investigation by The Insider identifies 38-year-old Vladimir Balobayev, a Russian Presidential Administration official who took over the Baltic states portfolio in 2024, as Moscow's point man overseeing agencies and propagandists targeting Latvia's October 3 Saeima election 12. The outlet separately names Igor Sorokopud, 43, the Russian embassy's first secretary in Riga, as SVR station chief in Latvia since 2024; per the investigation he trained at Russia's Defense Ministry Military University and the SVR academy and previously worked intelligence operations under diplomatic cover in Iran before his 2024 Riga posting, with operational focus on Latvia's NATO cooperation, Western military aid to Ukraine, and access to Latvian decision-makers 123. The Insider also reports SVR press bureau chief Sergei Guskov orchestrated a false May claim that Ukraine had arranged to launch strikes on Russia from Latvian territory 12. The investigation further links the pro-Kremlin Russian Union of Latvia and several Saeima candidates, including fugitive Aleksejs Rosļikovs, to this network, while Puaro.lv's Latvian-language report corroborates the identification of Balobayev and Sorokopud and their roles 3.

Analyst Note: Latvia likely will take at least one formal action, expulsion, arrest, or public attribution, against Balobayev, Sorokopud, or Guskov before the October 3 Saeima vote. Naming a sitting SVR station chief and Presidential Administration handler strips away the ambiguity that has let Riga avoid overt confrontation, and its 2023 embassy downgrade and the Ždanoka precedent show its services act once Kremlin networks are mapped publicly. The fabricated May claim tying Ukraine to a planned Latvian strike-launch deal raises the political cost of inaction. Confidence is moderate given reliance on a single outlet's unnamed sourcing, uncorroborated by any Latvian government statement; the investigation could equally reflect a leak or rivalry within Russia's own security services rather than independent journalistic penetration. Formal action before the vote would signal disruption of the Kremlin's influence network and shape voter perception of Russian Union of Latvia (RSL)-aligned candidates; inaction lets that network operate through election day unchallenged.

Sources:

1: Baltic export: The Insider identifies the Russian agents of influence working to destabilize Latvia elections

2: Антилатышские стрелки. Кто в Кремле курирует выборы в Латвии, шпионит под «крышей» посольства в Риге и продвигает «Русский мир» - The Insider (Russian edition)

3: "The Insider" atklāj Kremļa ietekmes tīklu Latvijā pirms Saeimas vēlēšanām - Puaro.lv

German Prosecutors Charge German-Ukrainian Woman With Spying for Russian Embassy Intelligence Officer

BLUF: Germany's pairing of criminal prosecution with diplomatic expulsion raises the operational cost for Russian embassy-cover intelligence networks and will likely yield a conviction within 12 months of the September 6 indictment.

Germany's Federal Prosecutor's Office charged a 57-year-old German-Ukrainian woman, identified only as Ilona W. under German privacy rules, with acting as an intelligence agent for Russia, filing the indictment at the Berlin Kammergericht on September 6 12. Prosecutors allege she was in contact with a full-time intelligence officer at the Russian Embassy in Berlin from at least October 2023, supplying him with tips on high-profile events and enabling his attendance, at times under a false name, to help him build his own intelligence network 123. She also allegedly sought to recruit contacts within the German Defense Ministry and defense industry and gathered information on German defense policy at the officer's request 12. She ran a Berlin marketing agency and chaired a lobbying group, was arrested on January 22, and has remained in pretrial detention since. German authorities separately expelled a Russian Embassy staffer, identified by dpa as the deputy military attaché, on espionage grounds, prompting Moscow to expel a German diplomat in response 234.

Analyst Note: Berlin's expulsion of the deputy military attaché alongside the indictment signals Germany is now pairing criminal prosecution with diplomatic retaliation against Russian intelligence networks operating through embassy cover, raising the cost of using event-based access to build unofficial sources. Conviction at the Kammergericht is likely within 12 months of the September 6 indictment, given the prosecution's documented evidence trail of contacts, tips, and false-name event access. Low confidence in this assessment reflects the Kammergericht's unscheduled docket, classified evidence handling requirements, and the unresolved status of two additional suspects tied to former Bundeswehr personnel, any of which could extend proceedings well past the 12-month mark. Her defense-industry recruitment attempts show Russian services are still probing Germany's arms pipeline to Ukraine through soft-target intermediaries rather than official channels.

Sources:

1: Prosecutors charge German-Ukrainian woman with aiding Russian intelligence - ABC News / AP

2: Anklage gegen Deutsch-Ukrainerin: Tagsüber Marketing, nachts Infos für Russland beschaffen - beck-aktuell

3: Bundesanwaltschaft klagt mutmaßliche russische Spionin in Berlin an - ad-hoc-news.de (dpa)

4: Ukrainian national charged with spying for Russia in Germany - European Pravda

GBA: Anklage wegen geheimdienstlicher Agententätigkeit erhoben - Der Generalbundesanwalt beim Bundesgerichtshof (GBA)

Adversary Intelligence Services

China Spy Chief Chen Yixin Warns AI Poses Direct Threat to Political Security and Names Western AI Models as Hacking Risks

BLUF: Chen's public naming of specific Western AI models as security threats is unlikely to produce formal restrictions within 30 days, serving instead as ideological positioning ahead of the Xi‑Trump summit.

China's Minister of State Security Chen Yixin wrote in an article published online on September 13 that "hostile forces" are abusing generative AI to "fabricate political rumours and spread harmful information," warning this constitutes "public opinion wars and cognitive warfare" that directly threatens China's political, institutional, and ideological security 123. Chen named Anthropic's Claude Mythos and OpenAI's ChatGPT-5.5-Cyber specifically, citing their hacking capabilities as posing "serious risks to China's critical information infrastructure" 12. He also said foreign intelligence agencies use AI-driven web crawling, data mining, and profiling to collect Chinese state data, trade secrets, and citizens' personal information, and called for China to secure "independent control" of core technologies including advanced chips 123. The article's publication precedes a planned meeting this month between Xi Jinping and US President Donald Trump in Washington, at which AI governance is expected to be on the agenda 123.

Analyst Note: Naming Claude Mythos and ChatGPT-5.5-Cyber by name elevates specific Western models from generic "foreign technology" rhetoric to named national-security threats, positioning Beijing to justify future restrictions on their use in government and infrastructure systems. This marks an escalation from MSS's June warning on generic unauthorized AI relay services, now tied explicitly to chip sovereignty. A formal Cyberspace Administration of China (CAC) or MSS notice restricting these models by mid-October is unlikely: the language reads as ideological positioning ahead of the Xi-Trump summit, with no CAC or MIIT drafting activity yet surfaced, and the rhetoric may instead function primarily as domestic messaging to harden China's negotiating posture. Confidence is low, resting on a single primary Chinese-language source (China Cyberspace) reproduced verbatim by multiple outlets via one AFP wire feed rather than independent reporting. Absent a restrictive notice, the article stands as negotiating leverage rather than an imminent compliance burden for Anthropic and OpenAI in the Chinese market.

Sources:

1: China spy chief warns foreign hostile forces may use AI to fabricate political rumours - Hong Kong Free Press

2: China's Spy Chief Warns of National Security Risks from AI - Asharq Al-Awsat English

3: China's spy chief warns of national security risks from AI - The Standard (Hong Kong)

国家安全部部长陈一新：全面筑牢人工智能安全屏障 推动人工智能健康有序发展 ("Comprehensively Building AI Security Barriers, Promoting Healthy and Orderly Development of AI") - China Cyberspace (中国网信), official WeChat account/journal of the Cyberspace Administration of China

China's Top Spy Chief Warns AI Is a Threat to Party Rule - GV Wire

Prior Reporting

IC Technology & Cyber

US Admits It Has Deployed Weapons in Orbit for Space Control

BLUF: Meink's disclosure functions as a calculated deterrence signal, trading decades of ambiguity for an acknowledged but deliberately unverifiable on-orbit capability that complicates Chinese and Russian space planning.

Air Force Secretary Troy Meink told the Air Force Association (AFA) Air, Space and Cyber Conference on Monday that the United States has "on-orbit space control weapons" deployed now, capable of defending the joint force against hostile adversary action 123. A Space Force spokesperson subsequently confirmed to The War Zone that the weapons can be employed both offensively and defensively, describing space control as encompassing kinetic and non-kinetic means to disrupt, degrade, or destroy adversary capabilities 1. Meink declined to specify weapon types, count, or whether the systems have been tested 13. DefenseScoop reported this is the first time a Pentagon official has publicly confirmed the existence of U.S. space-based weapons, and cited the Space Force's warfighting framework as describing interest in both pursuit and standoff kinetic weapons as well as non-kinetic space link interdiction capabilities 2. Prior to this disclosure, the only acknowledged U.S. anti-satellite capability was ground-based electronic warfare systems 1.

Analyst Note: Meink's on-record acknowledgment ends decades of U.S. ambiguity about space-based weapons, confirming space control now spans kinetic and non-kinetic on-orbit systems rather than the previously acknowledged ground-based jamming alone. The disclosure reads as a deterrence signal aimed at Beijing and Moscow more than a technical revelation, since Meink withheld weapon type, count, and testing status even under direct questioning. Allied and adversary planners must now factor an acknowledged, unspecified U.S. on-orbit strike capability into space-domain risk calculations without any way to verify its scale. Future disclosures will track doctrine and framing rather than hardware specifics, given the classification constraints officials cited.

Sources:

1: U.S. Admits It Has Weapons In Orbit - The War Zone

2: Meink: Space Force has deployed space control weapons to orbit - DefenseScoop

3: Meink Reveals Space Force Has 'On-Orbit Space Control Weapons' - Air & Space Forces Magazine

U.S. has deployed space-control weapons in orbit, Air Force secretary says - SpaceNews

Allied Intelligence

German Military Counter-Intelligence Agency MAD Warns of Rising Chinese and Russian Spy Threat in Annual Report

BLUF: MAD's inaugural mandated report frames Germany as a priority espionage target to justify expanded counterintelligence authorities, but withheld comparative data undercuts its core claim of escalating sabotage risk.

Germany's military counter-intelligence agency MAD, in its annual report released Monday, said Russia and China remained the primary actors behind attacks on the Bundeswehr in 2025, including espionage cases, drone overflights and cyber threats 12. MAD called Germany a "prioritized target of Russian espionage activities," citing the country's geostrategic position in NATO, the expansion of the Bundeswehr and new weapons systems as drivers, and said the potential for sabotage by recruited "low-level agents" has grown, though the report gave no comparative figures 23. The agency said Russian embassies, semi-governmental organizations and press agencies serve as cover for intelligence collection, and noted that Bundeswehr personnel traveling to Russia or Belarus, often to visit family, have come to the attention of those countries' security services, creating blackmail exposure 23. On China, MAD attributed at least some surveillance of military infrastructure, including drone overflights and intrusions onto Bundeswehr property, to Chinese intelligence services, which it said also draw on the Chinese diaspora 23. The report separately recorded 610 new extremism-related case reviews in 2025 versus 524 in 2024, with right-wing extremism cases rising from 413 to 519 3.

Analyst Note: MAD's report functions less as raw threat data than as a mandate-justifying document, the first published under the new law requiring annual disclosure, and its framing of Germany as a "prioritized target" will shape Bundeswehr counterintelligence budgeting and personnel vetting as force expansion continues. The withheld comparative sabotage figures limit independent verification of the claimed rise in low-level agent recruitment. Rising extremism caseloads, up sharply year over year and driven partly by the Zweibrücken paratrooper scandal, signal a parallel internal vetting burden distinct from the foreign espionage threat. Bundeswehr personnel travel to Russia and Belarus is a discrete blackmail exposure that creates pressure for new travel-disclosure policy.

Sources:

1: Jahresbericht MAD 2025: Schutz in Zeiten multipler Krisen - Bundeswehr (MAD)

2: German intelligence report warns of rising Russian, Chinese spy threat - DPA (via Yahoo News)

3: MAD: Bedrohung durch Sabotage hat "erheblich zugenommen" - t-online.de

German intelligence report warns of rising Chinese, Russian spy threat - South China Morning Post

COLLECTION GAPS

UNCLASSIFIED // OPEN SOURCE