Finnish National Bureau of Investigation (KRP) is investigating a rare espionage case involving unauthorized intelligence activities in Finland targeting a foreign state, not Finland itself. The case risks damaging Finland's foreign relations.

Intelligence & EspionageHuman Intelligence (HUMINT)Unknown

Aggressor

Summary

In April 2023, Finland's National Bureau of Investigation (KRP) initiated a preliminary investigation into unauthorized intelligence gathering occurring within Finland. The espionage targets a foreign country rather than Finland. The case was reported to police by the Finnish Security Intelligence Service (Supo), which does not conduct criminal investigations. The suspected offense is severe, classified as treason, with possible imprisonment between four months and six years. The investigation also involves two additional suspected treason cases in Finland: one related to the exposure of a state security secret since January 2023, and another concerning a cyberattack on the state ICT center Valtori suspected to involve espionage. Previous cases include convictions of journalists for revealing security secrets.

Classification

Confidence: High

There is confirmed unauthorized intelligence activity (espionage) occurring on Finnish soil against a foreign state, which poses a threat to national security and foreign relations, consistent with hybrid warfare hostile signals.

Source URL

https://yle.fi/a/74-20228779

Open source

Provenance

Publisher: extension
Submitted: Jun 4, 2026, 11:43 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Apr 1, 2023, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "b01ccd59-594f-414c-9f54-42b2730a2a57",
  "url": "https://yle.fi/a/74-20228779",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Unknown",
  "country": "Finland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "espionage",
    "investigations",
    "treason",
    "unauthorized intelligence",
    "Finland",
    "foreign state",
    "KRP",
    "Supo",
    "state security",
    "cyberattacks"
  ],
  "nodes": [],
  "countries": [
    "Finland"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "In April 2023, Finland's National Bureau of Investigation (KRP) initiated a preliminary investigation into unauthorized intelligence gathering occurring within Finland. The espionage targets a foreign country rather than Finland. The case was reported to police by the Finnish Security Intelligence Service (Supo), which does not conduct criminal investigations. The suspected offense is severe, classified as treason, with possible imprisonment between four months and six years. The investigation also involves two additional suspected treason cases in Finland: one related to the exposure of a state security secret since January 2023, and another concerning a cyberattack on the state ICT center Valtori suspected to involve espionage. Previous cases include convictions of journalists for revealing security secrets.",
  "summary_short": "Finnish National Bureau of Investigation (KRP) is investigating a rare espionage case involving unauthorized intelligence activities in Finland targeting a foreign state, not Finland itself. The case risks damaging Finland's foreign relations.",
  "summary_extended": null,
  "actor_primary": "Finnish National Bureau of Investigation (KRP)",
  "target_primary": null,
  "location_text": "Finland",
  "location_region": null,
  "location_coordinates_lat": 61.9241,
  "location_coordinates_lon": 25.7482,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "There is confirmed unauthorized intelligence activity (espionage) occurring on Finnish soil against a foreign state, which poses a threat to national security and foreign relations, consistent with hybrid warfare hostile signals.",
  "event_time_utc": "2023-04-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-06-04T11:43:00.536Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Apr 1, 2023, 00:00 UTC

Event time confidence

pm24h

Location

Finland

Primary actor

Finnish National Bureau of Investigation (KRP)

Country

Finland

Countries

Finland

Tags

espionage, investigations, treason, unauthorized intelligence, Finland, foreign state, KRP, Supo, state security, cyberattacks

Loading signal...

{ "id": "b01ccd59-594f-414c-9f54-42b2730a2a57", "url": "https://yle.fi/a/74-20228779", "source": "extension", "status": "approved", "category": "Intelligence & Espionage", "subcategory": "Human Intelligence (HUMINT)", "incident_type": "Unknown", "country": "Finland", "source_reliability": "C", "info_credibility": "3", "tags": [ "espionage", "investigations", "treason", "unauthorized intelligence", "Finland", "foreign state", "KRP", "Supo", "state security", "cyberattacks" ], "nodes": [], "countries": [ "Finland" ], "where_text": "Land", "headline": null, "description": "In April 2023, Finland's National Bureau of Investigation (KRP) initiated a preliminary investigation into unauthorized intelligence gathering occurring within Finland. The espionage targets a foreign country rather than Finland. The case was reported to police by the Finnish Security Intelligence Service (Supo), which does not conduct criminal investigations. The suspected offense is severe, classified as treason, with possible imprisonment between four months and six years. The investigation also involves two additional suspected treason cases in Finland: one related to the exposure of a state security secret since January 2023, and another concerning a cyberattack on the state ICT center Valtori suspected to involve espionage. Previous cases include convictions of journalists for revealing security secrets.", "summary_short": "Finnish National Bureau of Investigation (KRP) is investigating a rare espionage case involving unauthorized intelligence activities in Finland targeting a foreign state, not Finland itself. The case risks damaging Finland's foreign relations.", "summary_extended": null, "actor_primary": "Finnish National Bureau of Investigation (KRP)", "target_primary": null, "location_text": "Finland", "location_region": null, "location_coordinates_lat": 61.9241, "location_coordinates_lon": 25.7482, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "There is confirmed unauthorized intelligence activity (espionage) occurring on Finnish soil against a foreign state, which poses a threat to national security and foreign relations, consistent with hybrid warfare hostile signals.", "event_time_utc": "2023-04-01T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-06-04T11:43:00.536Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }