{
  "id": "480994cb-1fc6-4e6e-bf80-5559f51a5edd",
  "url": "https://tagesschau.de/investigativ/br-recherche/prozess-london-spionage-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "espionage",
    "Marsalek",
    "Russia",
    "UK",
    "Wirecard",
    "Telegram",
    "NATO",
    "trial",
    "Bulgarian nationals"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "Trial Begins in London Over Alleged Russian Espionage Directed by Marsalek",
  "description": "On November 26, 2024, the trial started in London for six Bulgarian nationals accused of spying for Russia under the alleged direction of former Wirecard executive Jan Marsalek. The British authorities claim the group collected sensitive documents and information damaging to the UK between August 2022 and February 2023. Key figure Orlin R., a former tech entrepreneur and director of a London firm, is said to have communicated with a Russian agent believed to be Marsalek, who supposedly led the spy cell and ordered activities including attempts to purchase information on NATO bases in Germany and espionage against the Kazakh embassy in London. Evidence includes Telegram chats discussing the transfer of a secured SINA laptop from Berlin to the Russian FSB in Moscow in December 2022. The accused have denied charges during prior hearings but may alter their plea. Multiple forged passports were seized during arrests in early 2023. The trial was delayed from October to November due to newly submitted evidence and is expected to last several months. Marsalek disappeared in June 2020 after the Wirecard collapse and is suspected to be in Russia, although his exact location is unknown. The case highlights Moscow-linked espionage activity in Europe and involves cross-border operatives and covert communication.",
  "summary_short": "Trial begins in London against six Bulgarians accused of spying for Russia under alleged direction of ex-Wirecard exec Jan Marsalek, involving espionage targeting UK and NATO interests from 2022-2023.",
  "summary_extended": "The London Old Bailey court commenced trial proceedings on November 26, 2024, against six Bulgarian citizens charged with conducting espionage activities for Russia between August 2022 and February 2023. The British prosecution alleges the group collected sensitive information detrimental to UK interests, with leadership and operational direction provided by Jan Marsalek, former Wirecard CFO now a fugitive suspected to reside in Russia. Central to the case is Orlin R., a former technology firm director in London, who reportedly communicated with a Russian agent identified as Marsalek via encrypted Telegram messages. Notably, the group attempted to acquire intelligence about NATO bases in Germany and surveilled the Kazakh embassy in London. Evidence includes intercepted communications and the movement of a secure SINA laptop from Berlin to Moscow's FSB. The accused, previously denying charges, may amend their pleas in the ongoing months-long trial. Arrests in early 2023 uncovered forged European passports. Marsalek fled Germany in June 2020 after Wirecard's collapse and continues to evade capture. This case underscores ongoing Russian human intelligence operations targeting Western countries using covert networks spanning multiple European states.",
  "actor_primary": "Jan Marsalek",
  "target_primary": null,
  "location_text": "London",
  "location_region": "Greater London",
  "location_coordinates_lat": 51.5074,
  "location_coordinates_lon": -0.1278,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly details an espionage operation directed by Jan Marsalek, a fugitive with alleged ties to Russian intelligence, targeting the UK and NATO with hackers and spies who have been arrested and are now on trial. These are concrete hostile actions constituting Russian hybrid warfare activities.",
  "event_time_utc": "2024-11-26T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T14:51:00.938Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "480994cb-1fc6-4e6e-bf80-5559f51a5edd",
  "url": "https://tagesschau.de/investigativ/br-recherche/prozess-london-spionage-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "espionage",
    "Marsalek",
    "Russia",
    "UK",
    "Wirecard",
    "Telegram",
    "NATO",
    "trial",
    "Bulgarian nationals"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "Trial Begins in London Over Alleged Russian Espionage Directed by Marsalek",
  "description": "On November 26, 2024, the trial started in London for six Bulgarian nationals accused of spying for Russia under the alleged direction of former Wirecard executive Jan Marsalek. The British authorities claim the group collected sensitive documents and information damaging to the UK between August 2022 and February 2023. Key figure Orlin R., a former tech entrepreneur and director of a London firm, is said to have communicated with a Russian agent believed to be Marsalek, who supposedly led the spy cell and ordered activities including attempts to purchase information on NATO bases in Germany and espionage against the Kazakh embassy in London. Evidence includes Telegram chats discussing the transfer of a secured SINA laptop from Berlin to the Russian FSB in Moscow in December 2022. The accused have denied charges during prior hearings but may alter their plea. Multiple forged passports were seized during arrests in early 2023. The trial was delayed from October to November due to newly submitted evidence and is expected to last several months. Marsalek disappeared in June 2020 after the Wirecard collapse and is suspected to be in Russia, although his exact location is unknown. The case highlights Moscow-linked espionage activity in Europe and involves cross-border operatives and covert communication.",
  "summary_short": "Trial begins in London against six Bulgarians accused of spying for Russia under alleged direction of ex-Wirecard exec Jan Marsalek, involving espionage targeting UK and NATO interests from 2022-2023.",
  "summary_extended": "The London Old Bailey court commenced trial proceedings on November 26, 2024, against six Bulgarian citizens charged with conducting espionage activities for Russia between August 2022 and February 2023. The British prosecution alleges the group collected sensitive information detrimental to UK interests, with leadership and operational direction provided by Jan Marsalek, former Wirecard CFO now a fugitive suspected to reside in Russia. Central to the case is Orlin R., a former technology firm director in London, who reportedly communicated with a Russian agent identified as Marsalek via encrypted Telegram messages. Notably, the group attempted to acquire intelligence about NATO bases in Germany and surveilled the Kazakh embassy in London. Evidence includes intercepted communications and the movement of a secure SINA laptop from Berlin to Moscow's FSB. The accused, previously denying charges, may amend their pleas in the ongoing months-long trial. Arrests in early 2023 uncovered forged European passports. Marsalek fled Germany in June 2020 after Wirecard's collapse and continues to evade capture. This case underscores ongoing Russian human intelligence operations targeting Western countries using covert networks spanning multiple European states.",
  "actor_primary": "Jan Marsalek",
  "target_primary": null,
  "location_text": "London",
  "location_region": "Greater London",
  "location_coordinates_lat": 51.5074,
  "location_coordinates_lon": -0.1278,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly details an espionage operation directed by Jan Marsalek, a fugitive with alleged ties to Russian intelligence, targeting the UK and NATO with hackers and spies who have been arrested and are now on trial. These are concrete hostile actions constituting Russian hybrid warfare activities.",
  "event_time_utc": "2024-11-26T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T14:51:00.938Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}