EMET NEWS PRESS

Operational Situation

Säpo states that it monitored the operation for an extended period and documented at least two personal contacts between the agent and the Russian intelligence officers in the Stockholm area. One meeting took place in a restaurant, while another occurred during a joint walk.

Before the restaurant meeting, the Russian case officer allegedly used clandestine measures intended to complicate surveillance. During the meeting, he gave the agent gifts, received information and issued new collection requirements. Säpo stated that it had identified both the information transferred and the subsequent tasking. No details have been released concerning the content, classification or Swedish institutions affected.

The two Russian officers and the recruited agent enjoyed diplomatic immunity. According to Säpo, criminal proceedings aimed at securing convictions were therefore unavailable. The Swedish Government ordered the two Russian officers to leave the country. The agent also left Sweden; the circumstances of his departure and the response of his sending state remain unknown.

Operational Objectives

According to Säpo Deputy Head of Operations Christoffer Wedelin, the immediate collection target concerned Sweden’s central political decision-making. This indicates an interest in internal procedures, political fault lines and potential windows for subsequent influence activities. The Swedish institutions and individuals targeted have not been identified, reflecting the need to protect sources and methods.

The HUMINT collection was intended to prepare subsequent influence activity, according to the Swedish account. Knowledge of decision-making procedures could allow an intelligence service to refine narratives, exploit domestic tensions and coordinate public messaging with political deliberations. This is an analytical inference; no publicly disseminated Russian narrative has yet been attributed to the operation.

In its 2025–2026 threat assessment, Säpo identifies Swedish political positions, work within NATO and the EU, and support for Ukraine as priority Russian intelligence interests. Sweden’s defence industry, military capabilities and critical infrastructure are also listed. There is no evidence that the disrupted operation obtained information from all these areas.

Political Context

Justice Minister Gunnar Strömmer stated that the Swedish Government does not assess the operation as connected to the parliamentary election scheduled for September 2026. He described it as part of a broader, long-term Russian campaign against Sweden. This distinction represents an official assessment that cannot be independently verified from the information released.

Foreign Minister Maria Malmer Stenergard confirmed that accredited diplomats had been compelled to leave Sweden because of their activities. The Russian Embassy in Stockholm had not responded to a Reuters request for comment at the time of publication.

Säpo continues to assess Russia as the principal state threat to Sweden. Sweden’s accession to NATO has strengthened national security while simultaneously increasing Russian intelligence interest in the country. The present case corresponds with this threat assessment: traditional agent handling under diplomatic cover was combined with preparations for political influence activity.

Significance for NATO and the European Union

The operation extended beyond Sweden because its intended discrediting activity explicitly included NATO and the EU. Political decisions by an individual Allied state can affect collective support for Ukraine, military planning and the political cohesion of European institutions.

The recruitment of a diplomat or embassy employee from a third country is particularly significant. Such an agent may possess diplomatic contacts that provide access to political circles while creating an additional layer of concealment for Russian activity. As the country concerned has not been identified, attribution to any NATO member, EU state or partner country would be unfounded.

Säpo’s disclosure warns potential recruitment targets and publicly exposes central elements of Russian tradecraft. The agency has not stated whether or to what extent it shared operational intelligence with partner services. Publication of the surveillance images may also serve a deterrent purpose. This assessment is plausible, although Säpo has not explicitly identified deterrence as a reason for the disclosure.

Operational Consequences and Outlook

The departure of the three individuals disrupted the operational channel observed by Säpo in Sweden and removed two identified SVR case officers operating under diplomatic cover. It does not eliminate Russia’s underlying intelligence requirements. The SVR is assessed with medium-to-high confidence as likely to seek replacement access through other human sources or alternative forms of cover. No public information indicates that a replacement operation is already underway.

Possible diplomatic action by the recruited agent’s sending state, further Swedish expulsions and indications of additional contacts are relevant short-term indicators. A coordinated response from the EU or NATO would also be significant. No involvement by further individuals has been publicly confirmed.

Intelligence Assessment

The public attribution to the SVR is detailed. Säpo supports its assessment by referring to documented meetings, observed exchanges and identified collection requirements. Reuters, SVT, TT and TV4 consistently reproduce the agency’s account and supplement it with statements from Swedish government officials. No independent confirmation of the operational evidence is available.

The Swedish account of a HUMINT relationship handled by two SVR officers is highly plausible. Independent examination of the operational evidence is impossible on the basis of the material released. The scope of the collection and any resulting intelligence damage can be assessed only with low-to-medium confidence. No public evidence demonstrates access to classified information, successful alteration of Swedish decisions or the execution of an attributable influence campaign.

No immediate military effect is apparent from the available information. The undisclosed scope of the collection prevents such an effect from being conclusively excluded. The case nevertheless carries elevated strategic significance because it exposes the connection between traditional agent handling and preparations for political influence inside a NATO member state. The operation is therefore assessed as a concrete component of continuing Russian hybrid activity targeting European decision-making and Alliance cohesion.

Glossary

• Säpo: Common abbreviation for Sweden’s Security Service, Säkerhetspolisen.

• SVR: Sluzhba Vneshney Razvedki, Russia’s civilian foreign intelligence service.

• HUMINT: Intelligence collected through human sources.

• Agent: A recruited human source working for an intelligence service.

• Case officer: An intelligence officer who recruits, handles and tasks a human source.

• Diplomatic cover: The deployment of an intelligence officer under an official diplomatic position.

• Clandestine methods: Measures used to conceal contacts, identities and operational activity.

Persons Register

• Christoffer Wedelin: Deputy Head of Operations at Säkerhetspolisen.

• Gunnar Strömmer: Swedish Minister for Justice.

• Maria Malmer Stenergard: Swedish Minister for Foreign Affairs.

References

Säkerhetspolisen – Russian Intelligence Operation Disrupted – 10 August 2026
sakerhetspolisen.se/ovriga-sidor/nyheter/nyheter/2026-08-10-rysk-underrattelseoperation-avbruten.html

SVT News – Russian Intelligence Officer in Secret Meeting with Agent at Swedish Pub – 10 August 2026

svt.se/nyheter/inrikes/rysk-underrattelseofficer-i-hemligt-mote-med-agent-pa-pub-i-sverige

SVT News – Gunnar Strömmer: Government Takes the Incident Seriously – 10 August 2026
svt.se/nyheter/inrikes/gunnar-strommer-m-regeringen-ser-allvarligt-pa-det-intraffade

Reuters – Swedish Security Service Says It Broke Up Russian Spy Plot – 10 August 2026
reuters.com/world/swedish-security-service-says-it-broke-up-russian-spy-plot-2026-08-10

Säkerhetspolisen – 2025–2026 

Threat Assessment: Russia, China and Iran – 18 March 2026
sakerhetspolisen.se/om-sakerhetspolisen/publikationer/sakerhetspolisens-lagesbilder/sakerhetspolisen-2025-2026/ryssland-kina-och-iran.html

NATO – Countering Hybrid Threats – updated 29 January 2026
nato.int/en/what-we-do/deterrence-and-defence/countering-hybrid-threats