{
  "id": "77e38a3b-eb44-4a43-a8dc-d2d023baae59",
  "url": "https://tagesschau.de/ausland/europa/haftstrafen-london-spione-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "Jan Marsalek",
    "Wirecard",
    "Bulgarian spies",
    "London court",
    "Telegram communications",
    "US military base surveillance",
    "Stuttgart",
    "Investigative journalists kidnapping plot",
    "Hybrid warfare",
    "Intelligence operations"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "London Court Sentences Six Bulgarians as Russian Spies Linked to Jan Marsalek",
  "description": "On May 12, 2025, the Central Criminal Court in London sentenced six Bulgarian nationals to prison terms between five and nearly eleven years for spying on behalf of Russia. The group operated from summer 2020 until their arrest in February 2023. The spy ring was directed by Jan Marsalek, the former Wirecard board member believed to be hiding in Russia. Evidence included nearly 80,000 Telegram messages between Marsalek and the group's leader, Orlin R., discussing six espionage operations. The suspects surveilled a US military base in Stuttgart, allegedly photographing residences and scouting rental apartments nearby. Police seized drones, 200 mobile phones, and forged documents used to open bank accounts in the UK. Three suspects confessed during trial, receiving reduced sentences. Additionally, plans to kidnap two investigative journalists were uncovered but not executed. Following UK incarceration, the Bulgarians will serve remaining sentences in Bulgaria.",
  "summary_short": "London court sentenced six Bulgarians to 5-11 years for spying for Russia, directed by ex-Wirecard manager Jan Marsalek suspected in Russia. The group spied from 2020-2023, targeting US military base in Stuttgart and plotting kidnappings.",
  "summary_extended": "In a high-profile espionage case concluded on May 12, 2025, the Central Criminal Court in London convicted six Bulgarian nationals of spying for Russia under the direction of Jan Marsalek, the former Wirecard executive now believed to live in Russia. Operating from summer 2020 until their February 2023 arrests, the group, led by Orlin R., used Telegram messaging—80,000 texts recovered mentioned six espionage operations, some unexecuted. They surveilled the US military patch barracks in Stuttgart, photographing nearby residences and seeking rentals, suspecting Ukrainian air defense training. Police seized drones, forged documents, and 200 phones used for bank fraud. Three suspects confessed, limiting sentences to under 11 years; maximum possible was 14 years. Plans to kidnap investigative journalists were revealed but never carried out. Post UK sentencing, the convicts will serve time in Bulgaria. The case underscores Russian intelligence efforts leveraging expatriates to infiltrate NATO-aligned states.",
  "actor_primary": "Orlin R.",
  "target_primary": null,
  "location_text": "London",
  "location_region": null,
  "location_coordinates_lat": 51.5145,
  "location_coordinates_lon": -0.0983,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a hostile Russian-directed espionage operation by Bulgarian agents in the UK targeting Western military facilities and involving surveillance and covert communications, with concrete timelines, arrests, and convictions.",
  "event_time_utc": "2025-05-12T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-04-28T14:35:00.592Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "77e38a3b-eb44-4a43-a8dc-d2d023baae59",
  "url": "https://tagesschau.de/ausland/europa/haftstrafen-london-spione-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "Jan Marsalek",
    "Wirecard",
    "Bulgarian spies",
    "London court",
    "Telegram communications",
    "US military base surveillance",
    "Stuttgart",
    "Investigative journalists kidnapping plot",
    "Hybrid warfare",
    "Intelligence operations"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "United Kingdom"
  ],
  "where_text": "Land",
  "headline": "London Court Sentences Six Bulgarians as Russian Spies Linked to Jan Marsalek",
  "description": "On May 12, 2025, the Central Criminal Court in London sentenced six Bulgarian nationals to prison terms between five and nearly eleven years for spying on behalf of Russia. The group operated from summer 2020 until their arrest in February 2023. The spy ring was directed by Jan Marsalek, the former Wirecard board member believed to be hiding in Russia. Evidence included nearly 80,000 Telegram messages between Marsalek and the group's leader, Orlin R., discussing six espionage operations. The suspects surveilled a US military base in Stuttgart, allegedly photographing residences and scouting rental apartments nearby. Police seized drones, 200 mobile phones, and forged documents used to open bank accounts in the UK. Three suspects confessed during trial, receiving reduced sentences. Additionally, plans to kidnap two investigative journalists were uncovered but not executed. Following UK incarceration, the Bulgarians will serve remaining sentences in Bulgaria.",
  "summary_short": "London court sentenced six Bulgarians to 5-11 years for spying for Russia, directed by ex-Wirecard manager Jan Marsalek suspected in Russia. The group spied from 2020-2023, targeting US military base in Stuttgart and plotting kidnappings.",
  "summary_extended": "In a high-profile espionage case concluded on May 12, 2025, the Central Criminal Court in London convicted six Bulgarian nationals of spying for Russia under the direction of Jan Marsalek, the former Wirecard executive now believed to live in Russia. Operating from summer 2020 until their February 2023 arrests, the group, led by Orlin R., used Telegram messaging—80,000 texts recovered mentioned six espionage operations, some unexecuted. They surveilled the US military patch barracks in Stuttgart, photographing nearby residences and seeking rentals, suspecting Ukrainian air defense training. Police seized drones, forged documents, and 200 phones used for bank fraud. Three suspects confessed, limiting sentences to under 11 years; maximum possible was 14 years. Plans to kidnap investigative journalists were revealed but never carried out. Post UK sentencing, the convicts will serve time in Bulgaria. The case underscores Russian intelligence efforts leveraging expatriates to infiltrate NATO-aligned states.",
  "actor_primary": "Orlin R.",
  "target_primary": null,
  "location_text": "London",
  "location_region": null,
  "location_coordinates_lat": 51.5145,
  "location_coordinates_lon": -0.0983,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a hostile Russian-directed espionage operation by Bulgarian agents in the UK targeting Western military facilities and involving surveillance and covert communications, with concrete timelines, arrests, and convictions.",
  "event_time_utc": "2025-05-12T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-04-28T14:35:00.592Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}