{
  "id": "def6897f-a78e-47ab-9ad5-269c341a819c",
  "url": "https://archive.ph/zJwUn",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Germany",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "GRU",
    "Berlin",
    "German intelligence",
    "spy arrests",
    "human intelligence",
    "military attaché expulsion",
    "defense sector espionage"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "Arrest of Suspected Russian Spy Ilona W. in Berlin for Espionage Activities Targeting German Politics and Military",
  "description": "On or around January 21, 2026, German Federal Criminal Police arrested Ilona W., a 56-year-old German-Ukrainian PR entrepreneur in Berlin, on suspicion of spying for Russia. Under surveillance for years, she allegedly passed sensitive information about Berlin politics, the German arms industry, and planned drone deliveries to Ukraine to the Russian military intelligence office in Berlin, specifically to Colonel Andrey M., the deputy Russian military attaché and GRU officer. Ilona W. reportedly used her network and event attendance to collect intelligence, including NATO Talks attendees, which included high-ranking officials. Two former German military personnel, Walter S. and Uwe V., who had extensive contacts with secret holders and defense industry circles, are also under investigation for possible contacts with her, though no arrests were made. The case underscores continued Russian espionage activity in Germany despite mass expulsions of Russian spies since 2022. On January 22, 2026, the German Foreign Ministry declared Colonel Andrey M. persona non grata, expelling him from Germany. The investigation highlights the Kremlin's use of amateur and low-level agents following losses of professional spies due to expulsions, and ongoing challenges to German counterintelligence efforts.",
  "summary_short": "German authorities arrested Ilona W. in Berlin on suspicion of spying for Russia, passing sensitive political and military information to a GRU officer. The Russian military attaché was expelled following the investigation in January 2026.",
  "summary_extended": "Ilona W., a 56-year-old German-Ukrainian PR entrepreneur known for attending high-profile political and diplomatic events in Berlin, was arrested on suspicion of acting as a Russian spy. Observed by German security services for years, she allegedly gathered and transmitted sensitive information on Berlin politics, the German arms industry, and plans to deliver drones to Ukraine to the Russian military intelligence through Colonel Andrey M., a GRU officer stationed as deputy military attaché. The investigation implicated two retired German military personnel, Walter S., an engineer with deep knowledge of German military aviation and drones, and Uwe V., a retired Bundeswehr officer formerly associated with a base housing US nuclear weapons. Both men maintained close contact with Ilona W. but were not arrested. German authorities conducted raids on their residences and seized devices for evidence. The espionage case illustrates continued covert Russian intelligence operations in Germany despite wide expulsions of Russian spies after the invasion of Ukraine, with the Kremlin increasingly relying on low-level amateur agents. On January 22, 2026, the German Foreign Ministry expelled Colonel Andrey M. from the country. The case has prompted renewed concerns over counterintelligence vulnerabilities and Russian influence networks operating in the German defense and political spheres.",
  "actor_primary": "German Federal Criminal Police",
  "target_primary": null,
  "location_text": "Berlin, Germany",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a hostile Russian espionage operation (aggressor signal) and the German authorities' operational and legal response including arrest and expulsion of a Russian officer (defense prep signal).",
  "event_time_utc": "2026-01-21T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:55.476Z",
  "updated_at": "2026-11-08T19:57:47.550Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "def6897f-a78e-47ab-9ad5-269c341a819c",
  "url": "https://archive.ph/zJwUn",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Germany",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "GRU",
    "Berlin",
    "German intelligence",
    "spy arrests",
    "human intelligence",
    "military attaché expulsion",
    "defense sector espionage"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "Arrest of Suspected Russian Spy Ilona W. in Berlin for Espionage Activities Targeting German Politics and Military",
  "description": "On or around January 21, 2026, German Federal Criminal Police arrested Ilona W., a 56-year-old German-Ukrainian PR entrepreneur in Berlin, on suspicion of spying for Russia. Under surveillance for years, she allegedly passed sensitive information about Berlin politics, the German arms industry, and planned drone deliveries to Ukraine to the Russian military intelligence office in Berlin, specifically to Colonel Andrey M., the deputy Russian military attaché and GRU officer. Ilona W. reportedly used her network and event attendance to collect intelligence, including NATO Talks attendees, which included high-ranking officials. Two former German military personnel, Walter S. and Uwe V., who had extensive contacts with secret holders and defense industry circles, are also under investigation for possible contacts with her, though no arrests were made. The case underscores continued Russian espionage activity in Germany despite mass expulsions of Russian spies since 2022. On January 22, 2026, the German Foreign Ministry declared Colonel Andrey M. persona non grata, expelling him from Germany. The investigation highlights the Kremlin's use of amateur and low-level agents following losses of professional spies due to expulsions, and ongoing challenges to German counterintelligence efforts.",
  "summary_short": "German authorities arrested Ilona W. in Berlin on suspicion of spying for Russia, passing sensitive political and military information to a GRU officer. The Russian military attaché was expelled following the investigation in January 2026.",
  "summary_extended": "Ilona W., a 56-year-old German-Ukrainian PR entrepreneur known for attending high-profile political and diplomatic events in Berlin, was arrested on suspicion of acting as a Russian spy. Observed by German security services for years, she allegedly gathered and transmitted sensitive information on Berlin politics, the German arms industry, and plans to deliver drones to Ukraine to the Russian military intelligence through Colonel Andrey M., a GRU officer stationed as deputy military attaché. The investigation implicated two retired German military personnel, Walter S., an engineer with deep knowledge of German military aviation and drones, and Uwe V., a retired Bundeswehr officer formerly associated with a base housing US nuclear weapons. Both men maintained close contact with Ilona W. but were not arrested. German authorities conducted raids on their residences and seized devices for evidence. The espionage case illustrates continued covert Russian intelligence operations in Germany despite wide expulsions of Russian spies after the invasion of Ukraine, with the Kremlin increasingly relying on low-level amateur agents. On January 22, 2026, the German Foreign Ministry expelled Colonel Andrey M. from the country. The case has prompted renewed concerns over counterintelligence vulnerabilities and Russian influence networks operating in the German defense and political spheres.",
  "actor_primary": "German Federal Criminal Police",
  "target_primary": null,
  "location_text": "Berlin, Germany",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a hostile Russian espionage operation (aggressor signal) and the German authorities' operational and legal response including arrest and expulsion of a Russian officer (defense prep signal).",
  "event_time_utc": "2026-01-21T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:55.476Z",
  "updated_at": "2026-11-08T19:57:47.550Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}