European security isn't just under threat from conventional forces. The real damage happens quietly behind closed doors through networks built over decades. On July 9, 2026, Italian Foreign Minister Antonio Tajani announced the immediate expulsion of two Russian military attachés, Ivan Petrovich Gorbachev and Mikhail Vasilyevich Astakhov. Rome gave them exactly three days to pack their bags and leave.
This isn't just another routine diplomatic spat. The expulsions follow a massive counter-espionage bust by the Rome Public Prosecutor's Office that exposed a deep-seated rot inside the nation's security apparatus.
Many analysts treat this as an isolated incident. They view it as a minor tactical win for Western counterintelligence. That view is dangerously wrong. This operation reveals how deeply Russian intelligence has penetrated European defense networks. It shows that Western nations are still playing catch-up against aggressive hybrid operations.
The Mechanics of a Twelve Year Betrayal
The public only sees the dramatic diplomatic expulsions. The real story lies in how the network operated. Earlier this week, Italian authorities arrested a 59-year-old former officer of the Carabinieri military police who had transitioned into the intelligence community. He wasn't a rogue operator acting alone. He ran a sophisticated cell.
The suspect used a network of six distinct sources. Four of those sources were active-duty members of the Italian military holding highly confidential posts. For over twelve years, this single handler funneled thousands of sensitive documents to Russian handlers. He didn't do it out of ideological loyalty. He did it for cold, hard cash.
This long-term penetration highlights a massive vulnerability in how European nations vet and monitor their security personnel. Intelligence services often focus heavily on external cyber threats while ignoring the human element. A single disgruntled or greedy insider can bypass billions of dollars in cybersecurity infrastructure with a simple flash drive or a compromised cell phone.
What Moscow Stole and Why It Hurts NATO
The scope of the compromised information is devastating for Western defense strategies. This wasn't low-level bureaucratic gossip. The stolen data directly targets current Western military support operations.
- SAMP/T Air Defense Systems: The spy network leaked classified technical details regarding the Italian-French SAMP/T air defense systems. These platforms are vital for protecting airspace and are currently a core component of military aid to Ukraine.
- Aster Missile Data: Information regarding Aster missiles, which have already been deployed to conflict zones, was handed directly to Russian handlers.
- NATO Operations: The network compromised operational data about specific NATO military missions inside Bulgaria.
- Aerospace Industrial Secrets: The handler accessed proprietary technical data from Avio, an Italian aerospace company that develops specialized motors for drones and supersonic missiles.
Knowing the exact specifications and vulnerabilities of the SAMP/T system allows Russian forces to develop countermeasures. It puts lives at risk on the ground. Italian Defense Minister Guido Crosetto openly admitted that this case represents just the tip of the iceberg. Russia is conducting an active, multi-front hybrid war against European institutions, using a mix of cyber strikes, disinformation, and classic espionage.
Urgent Steps to Fix Western Security Flaws
Western governments cannot afford to treat this as a simple criminal matter. The Russian embassy in Rome immediately tried to downplay the incident, claiming the expulsions were merely an attempt to limit Russian influence in Italy. Moscow already promised a reciprocal diplomatic retaliation.
To prevent the next major security breach, European defense ministries need to change how they operate.
First, implement continuous background monitoring for all personnel with access to high-level defense data. The traditional method of conducting a background check once every few years is completely useless against long-term financial recruitment.
Second, severely restrict the movement and access of foreign military attachés. Diplomatic immunity shouldn't serve as a permanent shield for running active spy rings on allied soil. Italy made the right move by naming and expelling Gorbachev and Astakhov quickly. Other NATO members must adopt the same zero-tolerance approach.
Audit your internal data access logs immediately. Track every individual who has interacted with sensitive missile technology or joint NATO mission blueprints over the last twelve months. Find the anomalies before foreign intelligence agencies profit from them.
