The arrest of a former intelligence chief forces a state to examine the foundations of its security establishment. In the case of August Hanning, who once headed Germany’s Federal Intelligence Service, the BND, the central question reaches beyond one man’s fate. Can an organisation built to detect foreign penetration recognise when the personal relationships of its senior officials become a channel through which state secrets leave its custody?
On 6 October 2026, federal prosecutors announced the arrests of Hanning and his former chief of staff, Manfred D. Hanning, who led the BND from 1998 to 2005. Prosecutors allege that the two agreed in spring 2010 to exchange intelligence for payment for use in Hanning’s private consultancy. Around 2,000 documents, many classified, allegedly changed hands. Manfred D. returned to the BND in 2012 and served successive presidents as chief of staff until March 2026.
The prosecutors describe two distinct allegations: preparing an analysis for an officer of one foreign intelligence service, with delivery still unconfirmed, and supplying political information to a representative of another, partly drawing on the material obtained. Neither service was named in the announcement. The suspects remain entitled to the presumption of innocence. Serious scrutiny requires us to distinguish allegations from established facts and resist assigning a foreign sponsor without evidence.
Behind the Azerbaijani connection
German media reports, citing Der Spiegel, identify Azerbaijan as the country linked to one of the foreign intelligence contacts under investigation. That attribution must be distinguished from the federal prosecutors’ public statement, which named neither service, nor from the separate question of who ultimately stood to benefit.
I do not accept the Azerbaijani connection as a sufficient explanation of the affair. My principal reservation concerns motive: I see no convincing explanation in the public record for why Azerbaijan would require access to such a broad and sensitive body of German intelligence. That is an analytical objection, rather than evidence that the reported connection is false. The visible contact may be only the first link in a longer chain.
A familiar possibility in intelligence work is recruitment under a false flag. A source believes he is working for one country, while his information ultimately serves another, whose identity he may never discover. In my assessment, a service such as Russia’s or Iran’s could conceivably exploit such an arrangement. This is a hypothesis that deserves examination, rather than an established finding about this case. Investigators must look beyond the apparent recipient to the ultimate beneficiary.
Such deception is sufficiently familiar that I find it difficult to believe German counterintelligence would overlook the possibility. Yet if investigators were to establish that a foreign service had recruited a former BND president and exploited his continuing access beneath the organisation’s nose, the operation would merit grudging professional respect for its effectiveness. For the BND, it would demand an uncomfortable reassessment. The standard of vigilance I had expected at the summit of German intelligence would have proved considerably less dependable than I had assumed.
The institutional risk is nevertheless clear. If the prosecutors’ account is substantiated, it would reveal a continuing channel between a former head of the service and an official who remained close to its leadership. That would demand an examination of access rights, relationships with retired officials, and the independence of those expected to scrutinise people accustomed to giving orders.
Trust after retirement
Intelligence work depends on trust. Officers exercise judgement, handle sensitive relationships, and often operate beyond ordinary public scrutiny. Yet professional trust must remain tied to a defined role and purpose. When personal standing continues to substitute for authorisation after an official leaves office, respect for past service can become confused with a continuing entitlement to secrets.
Retirement does not erase expertise or make consultancy illegitimate. Experience acquired in public service can benefit governments, industry, and international cooperation. But professional knowledge and classified state information are different assets. The ability to analyse world affairs does not authorise a former official to obtain confidential documents from colleagues still inside the service. Information entrusted to a public servant does not become private property when the appointment ends.
According to prosecutors, the case emerged from a search in September 2025 connected to a separate investigation involving Christina Block. That alone does not establish that every internal safeguard failed. An incidental discovery can lead to a thorough investigation, and the BND is cooperating with the inquiry. It does, however, raise an unavoidable question: were there earlier signs of the alleged flow of information, who examined them, and why did they not lead to earlier scrutiny?
The issue extends beyond how a document was copied. It concerns how a personal relationship could allegedly preserve access to state intelligence for years. A security system may record activity accurately and still fail if nobody assesses its significance or if scrutiny stops at the door of an influential individual.
Germany has faced this before
History does not establish Hanning’s guilt. It does provide a basis for comparison, provided we distinguish the institutions involved. The BND is Germany’s foreign intelligence service. The Federal Office for the Protection of the Constitution, the BfV, addresses threats to the constitutional order, including espionage within Germany. Cases involving both bodies and the Chancellor’s office show how authorised access, personal proximity, and human vulnerability can serve a foreign agency.
Heinz Felfe offers an especially stark example of the gap between formal responsibility and actual loyalty. A former member of the Nazi security apparatus, he was recruited by the KGB in 1950 and joined the Gehlen Organisation, the BND’s predecessor, a year later. He rose to a senior role in counterintelligence against the Soviet Union while supplying Moscow with thousands of documents and exposing agent networks. Arrested in 1961, he was sentenced to fourteen years’ imprisonment in 1963.
Felfe’s case does not justify assuming that a particular background determines a person’s future conduct. It demonstrates that professional competence and seniority are insufficient evidence of loyalty. An officer involved in penetration can influence the organisation’s interpretation of the very suspicions that might expose him. Effective oversight must therefore be capable of scrutinising the people responsible for scrutiny.
In 1974, Günter Guillaume, a close aide to Chancellor Willy Brandt, was exposed as an East German spy. He was not a BND employee; the relevant comparison concerns the protection of political decision-making. Suspicions had arisen in 1973, yet he continued to accompany the Chancellor and encountered secret material. The affair precipitated Brandt’s resignation alongside wider political pressures. An intelligence breach had become a crisis of leadership and public confidence.
Hansjoachim Tiedge illustrated another form of vulnerability. In 1985, the BfV official responsible for countering East German espionage defected to East Germany. The historical record describes debt, excessive drinking, and personal difficulties, as well as earlier security concerns that received insufficient attention from management. The full extent of what he disclosed is difficult to reconstruct. The lesson is that personal distress requires timely professional intervention, rather than neglect or humiliation.
The case of Markus R., uncovered in 2014, showed that an alliance does not remove the obligation to protect secrets. The BND employee supplied documents to American intelligence in return for payment. In March 2016, a Munich court sentenced him to eight years in prison and emphasised that disclosing secrets to an ally could still endanger Germany’s external security. Authorised cooperation between agencies does not permit an employee to establish a private commercial channel.
In December 2022, BND officer Carsten L. was arrested. The 2023 indictment against him and businessman Arthur E. alleged that classified information had been passed to Russia’s Federal Security Service through the business intermediary in exchange for money. This comparison rests on the allegations in the indictment. The scenario it describes illustrates the danger of combining internal access with an external contact who manages the relationship and the payment.
These cases differ in motive, method, and legal status. Felfe and Guillaume acted for foreign services; Tiedge defected amid a personal crisis; the sale of information was established in Markus R.’s case. The allegations concerning Carsten L. and Hanning require the appropriate legal distinction. Their relevance lies in the continuing need to assess the relationship between an individual, his access and his changing circumstances. A security assessment made years ago cannot guarantee future conduct.
The damage crosses borders
The problem does not end at Germany’s borders. Reports indicate that the material in the Hanning case included intelligence on Iran’s nuclear programme, the Russian military, and information supplied by partner services. A breach involving such material affects both the agency that collected it and those that relied upon it. The full extent of any disclosure to foreign recipients has yet to be established.
Intelligence exchanged among Western services is part of normal cooperation. No single country can collect everything it needs, and trusted partners help one another fill critical gaps. The receiving service takes custody of information it did not necessarily generate. That custody carries a duty to protect it and respect the originating service’s conditions on its use. Once the material passes into unauthorised hands, those protections may cease to be enforceable, and control over its further circulation can be lost.
In such a breach, the assets at risk can include human intelligence, or HUMINT: sensitive reporting obtained through people and the networks that support them. The danger is not confined to the disclosure of a name. Information that reveals a source’s access or the nature of the reporting can put individuals and wider networks at risk. These are capabilities built through sustained work and considerable personal sacrifice. Their compromise may endanger lives and destroy access that took years to establish.
Unique collection technologies and sensitive analytical capabilities can also be placed at risk. Such capabilities are strategic assets of the state. If an unauthorised recipient learns what a system can detect or how a service obtains its information, the value of that capability may diminish even without the physical technology changing hands. These are the kinds of consequences a serious damage assessment must examine; they should not be presented as confirmed findings before the evidence is available.
The number of documents is therefore an incomplete measure of the danger. A single report can expose a source, a collection method, or a weakness an adversary did not know had been identified. Thousands of documents do not automatically represent thousands of new secrets. Investigators must establish what was left in authorised custody, where it went, who gained access, and which people and capabilities need protection.
The BND would face a further loss if the allegations were substantiated: diminished confidence in its ability to safeguard the assets entrusted to it. A friendly service may continue to cooperate while becoming much more selective about what it provides. Routine assessments might still be shared, while sensitive reporting, source material, or urgent operational intelligence is withheld. The damage would then persist after the original channel of disclosure had been closed.
For Germany, that would be a security cost with direct consequences for its own citizens. Information withheld by a partner could, for example, contain the warning needed to identify a terrorist plot and prevent an attack. A loss of trust can mean the loss of an opportunity to act. Germany can scarcely afford to make its partners hesitate over sharing intelligence that might save German lives.
There is a particular danger when classified material is repackaged as private analysis. A client may receive a polished document carrying no classification marking and no visible copy of the original, yet still benefit from conclusions based on information that should never have been used. Changing the presentation does not change the obligation to protect the underlying intelligence. Both agencies and companies purchasing advice from former officials need to understand that boundary.
Rebuilding trust
The response should begin with a focused investigation into the facts and any resulting damage. Alongside the criminal inquiry, Germany needs an institutional examination of access, oversight, and the handling of warning signs. Who held responsibility at each stage? What checks were undertaken? Which findings require changes? A court will determine individual criminal responsibility. The organisation must also account for the effectiveness of its safeguards.
The central principle is straightforward: the breadth of access enjoyed by senior officials requires corresponding scrutiny. Independent review of privileged access, regular reassessment of the need for information, and appropriate recording of sensitive professional contacts should form part of routine practice. Oversight must itself be accountable, with sufficient independence from the officials it is expected to examine.
For retired officials, clear rules should reflect the actual security risk: continuing confidentiality obligations, regulation of activities that create conflicts of interest, appropriate disclosure of work for foreign state bodies, and a firm prohibition on obtaining classified material outside authorised channels. A waiting period before taking certain appointments may help, but it cannot resolve the problem if access and relationships remain available afterwards. The objective should be effective protection alongside the right to undertake lawful work.
A strong organisation also enables employees to report attempted recruitment, financial pressure, or a personal crisis before the situation deteriorates. Debt does not automatically imply disloyalty, and an international contact is not inherently improper. Staff need a credible route to seek assistance and assess risk. They also need confidence that raising a concern about an influential superior will not damage their careers.
Parliamentary oversight must receive enough information to assess whether corrective action is credible without publicly exposing sources and methods. Operational secrecy does not remove public accountability. A democracy must protect intelligence work while ensuring that secrecy does not shelter institutional failings.
From Jerusalem to New Delhi, the affair deserves the attention of governments, defence industries and companies that engage former security officials. An impressive title may attest to considerable experience. It does not establish that every piece of information offered has been lawfully obtained. Those purchasing advice must understand what they are buying, which obligations apply and where legitimate insight gives way to the misuse of state assets.
Germany’s test will be its ability to investigate an influential former official, establish the extent of any harm, and remedy the weaknesses the inquiry reveals. Allegations against individuals do not justify condemning Germany’s intelligence personnel collectively. They do justify demanding that the institution examine itself with the rigour it applies to external threats.
Those entrusted with state secrets must know that their authority is also subject to scrutiny. Germany’s history repeatedly demonstrates the danger of allowing personal standing to outweigh professional questions. Whatever the legal outcome of the Hanning case, Berlin must address the concerns raised by this affair through the way it investigates, accounts for its responsibilities, and rebuilds the confidence of its partners.
Let the cat guard the cream, and even your closest allies will learn to keep their bowls out of reach.