{
  "id": "4d27e5ca-85f0-49ae-b3ef-43a62538b65f",
  "url": "https://tagesschau.de/investigativ/br-recherche/marsalek-prozess-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "Jan Marsalek",
    "Wirecard",
    "Spy trial",
    "Bulgaria",
    "NATO targets",
    "United Kingdom"
  ],
  "nodes": [
    "Node 3: Political Disruptions"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "First confessions in spy trial in London over Jan Marsalek-led Russian espionage ring",
  "description": "A spy trial is ongoing in the Central Criminal Court in London against six Bulgarian nationals accused of spying for Russia from 2020 to 2023. Two of the accused have made initial confessions, admitting collaboration with a Russian agent using the pseudonym 'Rupert Ticz,' believed to be former Wirecard executive Jan Marsalek, who allegedly led the espionage group. The accused reportedly spied on NATO bases in Germany and the Kazakhstan embassy in London using false identities and advanced technology, and were arrested with forged passports. Marsalek is suspected to have instructed operatives including facilitating the transport of a secured laptop from Berlin to the Russian FSB in Moscow. Marsalek has been missing since fleeing Austria for Belarus in 2020 and is believed to be in Russia, though his exact location is unknown.",
  "summary_short": "In London, six Bulgarians are on trial for spying for Russia under the direction of ex-Wirecard exec Jan Marsalek, with two confessing involvement in espionage against NATO bases and the Kazakhstan embassy.",
  "summary_extended": "The Central Criminal Court in London has initiated a trial against six Bulgarians accused of espionage on behalf of Russia between 2020 and 2023. Two defendants have confessed to spying activities, including collaboration with a Russian agent using the alias 'Rupert Ticz,' identified as Jan Marsalek, the former Wirecard financial officer. Marsalek allegedly acted as the group's handler, ordering operations via Telegram, such as the transport in December 2022 of a highly secured SINA laptop from Berlin to Moscow's Russian FSB. The group is accused of targeting NATO bases in Germany and the Kazakhstan embassy in London in September 2022 while using false identities and advanced spy technology. Authorities arrested the suspects last year, seizing forged passports. Marsalek fled Austria for Belarus in mid-2020 and is currently believed to reside in Russia with an unknown exact location. Marsalek's lawyer declined to comment on the allegations.",
  "actor_primary": "Jan Marsalek",
  "target_primary": null,
  "location_text": "London",
  "location_region": null,
  "location_coordinates_lat": 51.5074,
  "location_coordinates_lon": -0.1278,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly details hostile Russian espionage activity involving a spy ring allegedly led by ex-Wirecard executive Marsalek targeting NATO and British interests, with confessions and arrests documented, confirming aggressor intent.",
  "event_time_utc": "2024-11-28T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T15:07:00.550Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}

{
  "id": "4d27e5ca-85f0-49ae-b3ef-43a62538b65f",
  "url": "https://tagesschau.de/investigativ/br-recherche/marsalek-prozess-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "Jan Marsalek",
    "Wirecard",
    "Spy trial",
    "Bulgaria",
    "NATO targets",
    "United Kingdom"
  ],
  "nodes": [
    "Node 3: Political Disruptions"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "First confessions in spy trial in London over Jan Marsalek-led Russian espionage ring",
  "description": "A spy trial is ongoing in the Central Criminal Court in London against six Bulgarian nationals accused of spying for Russia from 2020 to 2023. Two of the accused have made initial confessions, admitting collaboration with a Russian agent using the pseudonym 'Rupert Ticz,' believed to be former Wirecard executive Jan Marsalek, who allegedly led the espionage group. The accused reportedly spied on NATO bases in Germany and the Kazakhstan embassy in London using false identities and advanced technology, and were arrested with forged passports. Marsalek is suspected to have instructed operatives including facilitating the transport of a secured laptop from Berlin to the Russian FSB in Moscow. Marsalek has been missing since fleeing Austria for Belarus in 2020 and is believed to be in Russia, though his exact location is unknown.",
  "summary_short": "In London, six Bulgarians are on trial for spying for Russia under the direction of ex-Wirecard exec Jan Marsalek, with two confessing involvement in espionage against NATO bases and the Kazakhstan embassy.",
  "summary_extended": "The Central Criminal Court in London has initiated a trial against six Bulgarians accused of espionage on behalf of Russia between 2020 and 2023. Two defendants have confessed to spying activities, including collaboration with a Russian agent using the alias 'Rupert Ticz,' identified as Jan Marsalek, the former Wirecard financial officer. Marsalek allegedly acted as the group's handler, ordering operations via Telegram, such as the transport in December 2022 of a highly secured SINA laptop from Berlin to Moscow's Russian FSB. The group is accused of targeting NATO bases in Germany and the Kazakhstan embassy in London in September 2022 while using false identities and advanced spy technology. Authorities arrested the suspects last year, seizing forged passports. Marsalek fled Austria for Belarus in mid-2020 and is currently believed to reside in Russia with an unknown exact location. Marsalek's lawyer declined to comment on the allegations.",
  "actor_primary": "Jan Marsalek",
  "target_primary": null,
  "location_text": "London",
  "location_region": null,
  "location_coordinates_lat": 51.5074,
  "location_coordinates_lon": -0.1278,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly details hostile Russian espionage activity involving a spy ring allegedly led by ex-Wirecard executive Marsalek targeting NATO and British interests, with confessions and arrests documented, confirming aggressor intent.",
  "event_time_utc": "2024-11-28T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T15:07:00.550Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "independent_sources"
}