{
  "id": "16f575f2-72aa-42ba-86ec-a88809f16288",
  "url": "https://www.tagesschau.de/investigativ/oesterreich-spionage-russland-marsalek-egisto-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Austria",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Espionage",
    "Russia",
    "Austria",
    "Jan Marsalek",
    "Christo Grozev",
    "Wirecard",
    "FSB",
    "SINA laptops",
    "Intelligence leak",
    "Spy ring"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "Austria"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "Egisto O., a former Austrian domestic intelligence agent, has been arrested on suspicion of espionage for Russia. He allegedly spied on Russian dissidents, defectors, and critics including a researcher exposing Russian intelligence activities. O. used Austrian and foreign databases to obtain sensitive personal data such as home addresses and travel records without legitimate authorization, even after being suspended from duty. He reportedly involved colleagues and foreign contacts to access these data and is suspected of selling secret information to Russia, possibly under the direction of fugitive Wirecard executive Jan Marsalek. In one case, O. falsely presented himself as a police officer to gain information about researcher Christo Grozev. Grozev's apartment was later burgled in an organised attack linked to Marsalek's network. Authorities also suspect O. facilitated the transfer of encrypted laptops used by Austrian security services to the Russian FSB. Tens of thousands of chat messages found by British authorities in relation to Marsalek’s alleged spy ring helped build the case against O. He remains in pre-trial detention as Austrian prosecutors gather further evidence.",
  "summary_short": "Egisto O., a former Austrian intelligence officer, is accused of spying for Russia by illegally accessing personal information of Russian dissidents, defectors, and others. He allegedly acted on behalf of fugitive Jan Marsalek, with related activities including an orchestrated burglary of a targeted dissident's apartment.",
  "summary_extended": "Egisto O., a former officer at Austria's domestic intelligence agency BVT (now DSN), was arrested at his home in Carinthia on April 4, 2024, accused of years-long espionage for Russia. Among his targets were Russian dissidents, defectors like a former FSB officer under asylum in Montenegro, a Russian ex-banker protected in the UK, and investigative journalist Christo Grozev, known for exposing Russian intelligence operations. O. illegally queried personal data on these individuals from Austrian and international databases, often fabricating counter-terrorism justifications despite suspension from duty. Notably, in March 2021, he impersonated a police officer to obtain protected registration data on Grozev. This preceded a June 2022 break-in of Grozev’s Vienna apartment by a Marsalek-directed British-Bulgarian spy suspect, with theft of digital devices. Investigations also link O. to trafficking of secure SINA laptops and damaged ministry phones to Russian FSB via payments, including a documented 20,000 Euro transfer in November 2022. Thousands of chat messages obtained by British authorities implicate Marsalek’s network in overseeing these espionage activities. Austrian prosecutors believe they have strong evidence to prove O.’s role in espionage and equipment transfer, and his case has caused significant political and intelligence ramifications in Austria and Europe.",
  "actor_primary": "Egisto O.",
  "target_primary": null,
  "location_text": "Carinthia",
  "location_region": "Carinthia",
  "location_coordinates_lat": 46.6205,
  "location_coordinates_lon": 13.8021,
  "location_precision": "Exact",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event involves espionage by a former domestic intelligence officer providing sensitive data and equipment to a foreign adversary (Russia), constituting hostile foreign intelligence activity with clear hybrid warfare implications.",
  "event_time_utc": "2024-04-04T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-04-28T12:49:00.339Z",
  "updated_at": "2026-11-04T08:36:03.522Z",
  "reliability_band": "strong",
  "location_precision_band": "exact",
  "time_precision_band": "unknown",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}

{
  "id": "16f575f2-72aa-42ba-86ec-a88809f16288",
  "url": "https://www.tagesschau.de/investigativ/oesterreich-spionage-russland-marsalek-egisto-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Austria",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Espionage",
    "Russia",
    "Austria",
    "Jan Marsalek",
    "Christo Grozev",
    "Wirecard",
    "FSB",
    "SINA laptops",
    "Intelligence leak",
    "Spy ring"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "Austria"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "Egisto O., a former Austrian domestic intelligence agent, has been arrested on suspicion of espionage for Russia. He allegedly spied on Russian dissidents, defectors, and critics including a researcher exposing Russian intelligence activities. O. used Austrian and foreign databases to obtain sensitive personal data such as home addresses and travel records without legitimate authorization, even after being suspended from duty. He reportedly involved colleagues and foreign contacts to access these data and is suspected of selling secret information to Russia, possibly under the direction of fugitive Wirecard executive Jan Marsalek. In one case, O. falsely presented himself as a police officer to gain information about researcher Christo Grozev. Grozev's apartment was later burgled in an organised attack linked to Marsalek's network. Authorities also suspect O. facilitated the transfer of encrypted laptops used by Austrian security services to the Russian FSB. Tens of thousands of chat messages found by British authorities in relation to Marsalek’s alleged spy ring helped build the case against O. He remains in pre-trial detention as Austrian prosecutors gather further evidence.",
  "summary_short": "Egisto O., a former Austrian intelligence officer, is accused of spying for Russia by illegally accessing personal information of Russian dissidents, defectors, and others. He allegedly acted on behalf of fugitive Jan Marsalek, with related activities including an orchestrated burglary of a targeted dissident's apartment.",
  "summary_extended": "Egisto O., a former officer at Austria's domestic intelligence agency BVT (now DSN), was arrested at his home in Carinthia on April 4, 2024, accused of years-long espionage for Russia. Among his targets were Russian dissidents, defectors like a former FSB officer under asylum in Montenegro, a Russian ex-banker protected in the UK, and investigative journalist Christo Grozev, known for exposing Russian intelligence operations. O. illegally queried personal data on these individuals from Austrian and international databases, often fabricating counter-terrorism justifications despite suspension from duty. Notably, in March 2021, he impersonated a police officer to obtain protected registration data on Grozev. This preceded a June 2022 break-in of Grozev’s Vienna apartment by a Marsalek-directed British-Bulgarian spy suspect, with theft of digital devices. Investigations also link O. to trafficking of secure SINA laptops and damaged ministry phones to Russian FSB via payments, including a documented 20,000 Euro transfer in November 2022. Thousands of chat messages obtained by British authorities implicate Marsalek’s network in overseeing these espionage activities. Austrian prosecutors believe they have strong evidence to prove O.’s role in espionage and equipment transfer, and his case has caused significant political and intelligence ramifications in Austria and Europe.",
  "actor_primary": "Egisto O.",
  "target_primary": null,
  "location_text": "Carinthia",
  "location_region": "Carinthia",
  "location_coordinates_lat": 46.6205,
  "location_coordinates_lon": 13.8021,
  "location_precision": "Exact",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event involves espionage by a former domestic intelligence officer providing sensitive data and equipment to a foreign adversary (Russia), constituting hostile foreign intelligence activity with clear hybrid warfare implications.",
  "event_time_utc": "2024-04-04T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-04-28T12:49:00.339Z",
  "updated_at": "2026-11-04T08:36:03.522Z",
  "reliability_band": "strong",
  "location_precision_band": "exact",
  "time_precision_band": "unknown",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}