Why are Spies "Breaking Bad"?

0:10 Hello and welcome back to another episode of the Global Intelligence Weekly Wrap Up. I'm your host, Neil V. Son, a retired intelligence officer with the Canadian Security Intelligence Service and the Director of the Global Intelligence Knowledge Network. With over 25 years of national security investigations, I take a look at the open source headlines from around the world concerning espionage, sabotage, foreign interference, terrorism, and provide you with insights, analysis, and intelligence to help you understand, prepare, and be aware of what threats affect your career, your country, and your safety.

0:40 We've had a busy week in the world of lies, spies, and the things that sometimes make you cry. So let's dive in. We begin in Canada, where an alleged espionage case at NATO is raising an uncomfortable question. How effectively does our security screening system identify and deal with the warning signs of compromise?

0:57 On October 5th, Public Safety Minister Gary Ansangri appeared before the House of Commons Public Safety and National Security Committee. He acknowledged gaps in the screening system and confirmed that Global Affairs Canada granted a screening clearance to the Canadian intern arrested in Belgium this summer.

1:13 Recommendations from CESIS in the RCMP are now under review. Belgian authorities arrested the woman on July 24th of this year on allegations of espionage for a third country and participation in a criminal organization. She worked at the Supreme Headquarters Allied Powers Europe or SHAPE in Mons, Belgium.

1:31 Associated Press reported that NATO security services raised concerns with Belgian military intelligence leading to the investigation. CBC identified the suspect as Baiwei Zhang, also known professionally as Claire Zhang. Sources cited by Reuters linked the allegations to China, while the Chinese embassy rejected suggestions that she acted for Beijing.

1:52 The central security question concerns an earlier finding about her honesty. In 2023, the Public Service Commission found that Chang committed fraud in a Canada Border Service Agency appointment process. The reported conduct involved applications under different names and email addresses without subsequently clarifying that they came from the same person.

2:12 The federal court dismissed her application for judicial review in 2024. Despite the fact that this was an appointment process finding, it brings into questions the integrity of the applicant and should have also been a potential red flag in her application for her work with NATO. Although her dishonesty in an appointment process does not establish espionage, it is relevant in assessing her liability and trust.

2:34 The questions investigators and reviewers need to answer are pretty specific. 1. When was the clearance granted? 2. What information was available? 3. Who received the fraud funding? And 4. How was it assessed? Without those answers, we can't determine whether the problem involved missing information, poor information sharing, an inadequate assessment, or developments after screening.

2:58 There is an important distinction in how Canadian clearances work. CSIS investigates and provides security assessments, sponsoring department or agency themselves, makes the decision to grant, deny, suspend, or revoke a clearance. CSIS also provides assessment concerning Canadians seeking sensitive positions with international organizations, including NATO.

3:21 Its advice is one component of the overall process. That means accountability requires examination of the entire chain, from the information collected to the final decision and the subsequent management of access. Listeners may recognize the broader issue from our December 12, 2025 episode. In that segment on Canadian military intelligence member Master Warrant Officer Matthew Robar, we examined charges alleging the unauthorized communication of safeguarded defense information to a foreign entity.

3:51 That earlier case concerned an experienced military insider. This case concerns an intern at an allied headquarters. The allegations and circumstances are different, and there's no evidence presented here linking these cases. What connects them analytically is the importance of trusted access. We returned to that theme in our December 27, 2025 yearly wrap-up, when we discussed in more detail espionage and insider threats.

4:16 We emphasized that institutions must treat insider risk identification as an operational responsibility. The NATO case extends that discussion. An individual's Canadian clearance can support access within an allied institution. Consequently, the quality of Canadian security screening has implications beyond Canadian borders.

4:35 CSIS Deputy Director Vanessa Lloyd told MPs that the type of NATO internship involved normally requires secret level clearance. That describes the usual requirement. It does not publicly establish the suspect's precise access or what information, if any, may have been compromised. Adam Hatfield, an acting assistant deputy director at the Treasury Board Secretariat, emphasized another important point.

4:58 Screening improvements can involve the training, tools, and judgment of security officials, rather than just policy changes. From my perspective, this is another example of how security screening needs to extend well beyond the initial assessment or access to information. Additionally, it needs to be made clear in every screening process that information of relevance kept from the investigators or the investigation could result in the immediate revocation of that clearance, a further investigation, and the prosecution of the applicant under the corresponding act.

5:29 A documented concern must reach the appropriate decision maker, be evaluated against the sensitivity of the position, and produce a defensible decision. As we have pointed out, security needs to continue after access is granted. Federal screening procedures explicitly address ongoing maintenance and assurance.

5:47 A clearance cannot substitute for supervision, appropriate access limits, and a functioning process of reporting concerns. The reported detection by NATO security personnel is significant. It suggests that a later layer of security identified concerns even though the individual had entered the institution.

6:03 However, that doesn't resolve questions about initial screening and it demonstrates why institutions need several opportunities to detect an insider threat. Treat access to sensitive and classified information as a continuing responsibility of the organization. Requests for information outside someone's duties, attempts to bypass established controls, or pressure to move sensitive discussions into personal accounts should be reported through your organization's security channel.

6:38 Any concern regarding an employee's mental health, disgruntled attitude, financial difficulties, or addiction issues should be considered for possible signs of compromise. Security screening personnel should record what happened and allow trained personnel to assess it. The focus needs to be on conduct and access.

6:57 The most useful outcome of this review might be demonstrated improvements in information sharing, documented decisions, and ongoing security, not just reassurance about the number of screenings completed. We still do not know the full extent of the alleged activities of Zhang or their consequences. What we can recognize is the recurring pattern.

7:17 Trusted access creates opportunity, and protecting it requires attention for a person's relationship with an institution. The security access doesn't stop at acquiring the needed level of clearance. Our previous segment examined how a Canadian intern accused of espionage obtained security clearances to work at NATO.

7:43 This case raises questions about what information was available during screening, how concerns about honesty were assessed, and what happened after the access was granted. Our next segment takes us to Germany, where the arrest of a former intelligence chief raises questions about how institutions protect their secrets from people who once held their highest positions of trust.

8:04 These cases may be separate, but together they highlight two dimensions of security. Assessing someone's suitability before granting access and maintaining safeguards throughout and even after their employment. A security clearance is an assessment based on the information available at the time and circumstances.

8:20 Motivations and relationships can and do change. That is why screening must be supported by continued review, appropriate access controls, and a willingness to examine concerns, regardless of someone's seniority or reputation. August Hanning, who led Germany's Foreign Intelligence Service, the BND, from 1998 until 2005, was arrested on August 6th on suspicion of espionage-related offenses and attempted treason.

8:46 On October 7th, a federal judge ordered him held in pretrial detention. Hanning has denied all wrongdoing. Prosecutors allege that in 2010, several years after leaving the BND, Hanning agreed to pay his former office chief, identified as Manfred D. for confidential information. Manfred D. subsequently served as the office chief to several of Hanning's successors from 2012 until March of 2026.

9:15 According to investigators, he supplied Hanning with approximately 2,000 documents over the years, including classified material. The documents identified so far extend through June of 2022. Hanning allegedly used information in his private consulting activities, including an analysis intended for a foreign intelligence officer.

9:34 Whether that analysis reached its intended recipient remains unclear. Prosecutors also alleged that he passed political information, partly derived from the supplied material, to a representative of a foreign intelligence service. The foreign services have not been publicly identified by prosecutors.

9:52 What makes the allegation significant in this case is the potential mechanism used to transfer that information. Instead of recruiting a current spy chief of the VND, a former director seems to be the target, no longer needing his own institutional access if someone still inside is willing to provide that information to him.

10:09 Rational relationships can, and often do, survive retirement. Additionally, a retiring intelligence chief may have some influence on who takes his place in the agency once they leave. If these relationships become channels of unauthorized disclosure, an institution's secrets can leave through a believed, trusted colleague rather than a technical intrusion or a spy chief themselves.

10:31 This is essentially a cutout operation, where the individual with direct access is passing the information off to another who is providing it to the foreign state. This is not the first time the BND has faced insider espionage allegations. In a separate case, BD officer Karsten L. was arrested in December of 2022.

10:52 Prosecutors subsequently charged him and businessman Arthur E with particularly serious treason. They alleged that Karsten L. obtained classified documents from BND systems and supplied them through Arthur E to Russia's Federal Security Service at the FSD. The alleged payments included at least 450,000 euros or approximately 720,000 Canadian for Karsten L.

11:19 The recurring issue is access moving through a personal relationship to an outside recipient. But there are important differences that should be identified. Karsten L allegations explicitly identify Russia's FSB as the recipient of the intelligence. The Henning investigation has not publicly established the foreign services involved.

11:39 These are separate cases. Listeners may remember on our November 1st, 2024 episode, when we discussed Daniel Khalif's espionage trial and referenced Cameron Ortiz, a former senior RCMP intelligence official convicted of unauthorized disclosures. Ortiz's case was not a proven enemy state espionage case.

11:59 However, its revalence here is that seniority and access to sensitive information and intelligence do not eliminate the possibility of an insider breach. This is similar to Aldrich Aines of the CAA and Robert Hansen of the FBI. Both were convicted of spying for Soviet or Russian intelligence and received life sentences.

12:18 Neither was an agency director, but both demonstrate the damage that experienced intelligence insiders can cause. These comparisons help identify vulnerability, but they do not establish Hanning's guilt. Current BND chief Martin Jaeger says the service conducted extensive internal investigations before federal prosecutors took over.

12:38 German parliamentarian Constantine von Nutz has also raised concerns about the lobbying and commercial activities of former senior officials, warning that these relationships can provide openings for hostile intelligence services. The central lesson in this case is that retirement changes employee status, but it does not erase knowledge, relationships, or an obligation to protect classified information.

13:01 Legitimate consulting draws on expertise that can lawfully be shared. The alleged purchase of current institutional secrets is an entirely different matter. A damage assessment must therefore examine more than the number of documents. Investigators need to determine their sensitivity, who received the information, whether it exposed sources or methods, and whether intelligence supplied by partner services was affected.

13:25 If allied information was compromised, the consequences could extend well beyond Germany. Partners may reassess what they share and under what conditions. That is the potential consequence, not a confirmed outcome. For listeners working in intelligence, defense, government, or other sensitive industries, this story reinforces an important principle.

13:45 Familiarity does not authorize disclosure. A former supervisor asking for a briefing, document, or informal update still needs a lawful basis to receive it. Check authorization. Use approved channels. Report attempts to bypass access controls even when the request comes from someone highly respected.

14:03 My assessment is that the effective insider threat protection must apply throughout the organization, including senior leadership and relationships with former employees. The higher the position, the wider the potential access, and the greater the consequences if that trust is abused. Taken together, the NATO and BND cases show why we need to examine the entire system protecting sensitive information.

14:25 In the NATO case, the questions concern the clearance decision, the handling of an earlier fraud finding, and the timing of the alleged espionage. In the BND case, prosecutors allege that a serving insider supplied information to a former director over many years. That raised questions about continuing oversight, access controls, and relationships with former employees.

14:47 Neither case, from the publicly available information, establishes precisely where screening or other safeguards failed. But the intelligence lesson here is clear. An initial clearance cannot guarantee someone's future conduct, and a distinguished career cannot replace continuing accountability. Effective security requires institutions to reassess relevant concerns, limit access to legitimate duties, and ensure that employees can report suspicious requests even when they come from a current or former boss.

15:16 For listeners entrusted with sensitive information, the practical rule is straightforward. Verify authorization before sharing. Familiarity, seniority, and past service do not establish a present need to know. The pattern worth recognizing is the possibility that longstanding professional trust can become a pathway around institutional safeguards.

15:36 Protective classified information and secrets requires controls that remain effective even when the person asking once ran that very organization. We now turn from protecting classified information to protecting Canadian political decision making. Canada's new foreign influence registry is facing an early test.

16:02 What can it reveal about foreign involvement in the Alberta separatism debate and what falls outside its reach? Speaking on October 6th, Foreign Influence Transparency Commissioner Anton Bogman said past meetings between Alberta Separatist and American government officials do not have to be registered because they occurred before the legislation took effect on August 4th.

16:20 Recent Globe and Mail reporting examined contacts involving American political operatives and Alberta separatist organizers. Bogman said his office had contracted more than 60 individuals or groups involved in the referendum debate, including the Alberta Prosperity Project to explain potential registration obligations.

16:36 But the timing here matters. A completed meeting before the law took effect is different from an arrangement that began earlier and remained active afterward. The Commissioner's September guidance explicitly stated that qualifying arrangements continuing beyond August 4th had to be registered by October 3rd.

16:52 New qualifying arrangements generally must be registered within 14 days. So the headline does not mean every relationship established before August is permanently exempt. From an intelligence perspective, the important questions extend beyond the date of the meeting. For instance, was an ongoing relationship established?

17:09 Who provided money, services, or instructions? What activities followed? And were Canadians informed about the interests behind them? This connects directly with several earlier Global Intelligence Weekly wrap-up podcast discussions. On August 29th, we examined allegations of American influence activities in Greenland, including reported efforts to identify sympathetic residents and monitor critics.

17:30 In that segment, I raised the possibility that a burda separation debate could also attract American influence efforts. That was an assessment of potential vulnerability. This new reporting provides specific context to examine, but it does not prove that every concern expressed then has materialized.

17:47 Then on November 21st, we discussed Cesus warnings about the potential foreign interference targeting provincial referendums, including Alberta and Quebec. Our analysis emphasized that a regional vote could have national consequences. Resource policy, economic relationship, and confidence in Canadian institutions can all be affected.

18:04 On September 18th, I examined the registry's first public disclosures, including an arrangement involving former defense official Rachel Garbers and the United States government. The lesson was that disclosure of foreign influence does not in itself establish any wrongdoing. Transparent lawful activity is precisely what the register is intended to make visible.

18:24 This week's discussion moves forward from the arrival of the registry to the practical limits of what it captures. Bogman's position on the topic highlights an important distinction. His office administers a transparency law, but it does not replace the investigative responsibilities of CES or the RCMP, nor does an absence from the registry establish that a relationship is harmless or unlawful.

18:46 The legal scope also deserves careful explanation. An independent foreign think tank or foundation is not automatically a foreign principle simply because it is based outside Ottawa, but the Commissioner's guidance makes clear that the definition extends beyond governments. It can include foreign political parties and entities controlled by or acting in association with qualifying foreign powers.

19:06 The assessment, therefore, depends on the relationship and activities involved, not simply the organizations labeled. Related Canadian Press reporting describes a January meeting in Calgary involving Republican strategist and senior organizer Mitch Sylvester concerning software to identify and mobilize supporters.

19:23 Sylvester said he was uncomfortable with the meeting and registered using the Alberta Prosperity Project's membership list because of legal and privacy concerns. Reporting also described proposed exchanges involving water and oil resources for American support. Sylvester and fellow organizer Jeff Rath disputed those claims.

19:40 Premier Daniel Smith's office said she had no knowledge of the alleged meetings and opposed separation. Meeting foreign officials or discussing political strategy does not, by itself, prove covert foreign interference. My concern is a potential combination of undisclosed outside support, campaign capability, and access to Canadian political data.

19:59 We do not have evidence here establishing that membership information was transferred, but identifying who had access to such information is a legitimate security question. The connection with our earlier segments is accountability. For classified information, we ask who has access and whether they are authorized to receive it.

20:16 For political influence, we are asking who is participating, whose interests they represent, and whether those relationships are disclosed. Avertants have the right to debate their province's future. Protecting that debate means voters understand who may be seeking to shape it. For listeners, the practical lesson is to look beyond the message and ask the following questions.

20:35 1. Who paid for it? 2. Who supplied the campaign tools? 3. Who controls the organization? And finally, can the claim relationship be independently verified? For campaign organizers, protecting supporter information is equally important. A contact list can reveal political affiliations and provide opportunities for targeted persuasion.

20:56 My assessment is that the registry's value will depend on timely, meaningful disclosure, and effective follow-up, and not simply the number of names published. As we move ahead with the registry, we should watch for disclosures of continuing arrangements, clear explanations of the rules, and evidence-based findings about the reported contacts.

21:13 The absence of a registration is a question to examine. It is not, on its own, a verdict. The ultimate goal here is to have an informed Canadian electorate making decisions with clear understanding of the interest seeking to influence it. For a final segment this week, we turn to the United States, where a former senior CIA official has pleaded guilty in a fraud scheme involving government funds, luxury properties, and millions of dollars in gold bars.

21:45 David J. Rush entered his guilty plea to wire fraud on October 6th in the federal court in Alexandria, Virginia. According to the U.S. Justice Department, the scheme caused approximately 194 million US dollars in losses. Figure puts the headline of this news article about the gold bars into perspective.

22:04 This was a much broader misuse of government resources than just the acquisition or hoarding of gold. Prosecutors say Rush created fictitious government authorities, including a fabricated special access program, to obtain money for his personal benefit. Special access programs place additional restrictions on particularly sensitive activities.

22:22 Their secrecy protects legitimate operations, but Rush used the appearance of such an operation to support fraudulent spending. The proceeds went towards gold, luxury real estate, watches, and vehicles. When the FBI searched his home in May, investigators discovered 298 gold bars, substantial amounts of currency, and a number of luxury watches.

22:42 The gold alone had cost the government approximately forty six million dollars. Rush has agreed to forfeit assets acquired through the scheme. How nice of them. This is also a national security dimension beyond just financial losses. Reporting on his admissions describes the disclosure of classified information concerning a clandestine human source to a foreign official who was not authorized to receive it.

23:03 That's the potential compromise of a human source to profit Rush. Information about a human source can expose someone cooperating with an intelligence service, compromise an operation, an agency, a government, or a country, and endanger the lives of others connected to the source. Nevertheless, a combination of financial misconduct and authorized disclosure illustrates how abuse of an intelligence position can produce consequences well beyond the theft itself.

23:26 Listeners may remember back on January 24, 2025, we discussed Asif William Rothman, a CIA analyst from Vienna, Virginia. Rothman pleaded guilty to unlawfully retaining and transmitting classified national defense information concerning Israeli preparations to strike Iran. That segment examined the operational damage and potential strain on intelligence relationships when sensitive information leaves authorized channels.

23:49 The case of Rush extends the discussion in a different direction. Here, the central criminal scheme involved using a senior government position and a fictitious classified activity to obtain public funds for personal enrichment. Common element here is the misuse of responsibilities entrusted to an intelligence professional.

24:06 The conduct of circumstances are different, but both cases demonstrate that an individual's actions can cause damage to the institution, its operations, and public confidence. The case involving Rush also raises an important question about accountability inside secret organizations. Intelligence agencies cannot publicly explain every operation or expenditure.

24:26 However, their activities still require verification by people authorized to examine them. Compartmentation can restrict who receives information. It must also preserve a route through which the legitimate reviewers can establish whether an activity exists and whether its spending is authorized. The Justice Department says the investigation continues.

24:45 An investigation by the Intelligence Community Inspector General is also being requested. Those inquiries should help establish how the scheme operated and where controls need to be strengthened. CI Director John Ratcliffe says an internal investigation identified potential criminal conduct and that the agency referred the matter to the FBI.

25:03 This demonstrates that an internal examination of Rush helped bring the scheme to law enforcement's attention. The outstanding questions include how long the misconduct continued, which controls were circumvented, and whether earlier scrutiny could have reduced the losses. Darren Cox, the assistant director in charge of the FBI's Washington Field Office, emphasized the risks that Russia's conduct posed to colleagues, operations, and lives.

25:26 His assessment highlights why this case matters beyond the extraordinary financial details. In intelligence work, money, operational authority, and sensitive information are often closely connected. Misconduct involving one individual could have a ripple effect on the entire organization. Rush is scheduled to be sentenced on January 28th and faces a maximum of 20 years in prison.

25:47 This is the final segment of this week, and this case provides an opportunity to connect several of the issues we've examined on this week's podcast. We discussed an alleged espionage case involving a NATO position, allegations involving former BND chief August Hanning, and now admitted fraud by a former CIA official.

26:07 These cases are all at different legal stages. The NATO and German allegations still need to be tested in court. But Rush has pleaded guilty. Each of these cases involved different questions about how potential compromises acquire positions, retain access, and exercise influence. In the case with Rush, prosecutors say he lied about his education and military experience while advancing to a senior position.

26:28 The issue with Zhang acquiring a position with NATO raises questions about how her previously identified relevant adverse information, broadbus CBSA, was assessed during the clearance process. The case of August Hanning raises concerns about access to confidential information in relationships extending beyond a former intelligence chief's tenure.

26:47 Together these segments demonstrate why initial vetting, continuing review, and oversight of authority must work as a connected system. We cannot assume that the same screening failures occur in all three cases, but we can identify common questions that institutions with access to sensitive and classified information need to answer, such as were significant claims independently verified?

27:08 Did relevant concerns reach the people making access decisions? And did oversight remain effective after someone gained seniority or left their position with the organization? Several practical measures could help prevent similar problems. Qualification and service history should be checked directly with the institutions concerned.

27:27 Material discrepancies should be resolved before appointments or access decisions proceed. Security reviews should occur at regular and unexpected intervals and respond to significant new information as it becomes available. A concern that emerges between scheduled reviews needs a timely assessment. Access should match current duties and be adjusted when those duties change, including when someone retires or moves into private work.

27:52 Insensitive activities and expenditures need independent verification by appropriately authorized viewers. Seniority or claims of secrecy should never eliminate that requirement. Finally, staffing a credible way to raise concerns will influential colleagues with clear responsibility for examining those concerns and acting on the findings.

28:10 For our listeners, the broader lesson is that trusted positions require continuing accountability. The consequences of overlooking dishonesty or allowing authority to escape scrutiny can extend from financial losses to compromise operations potentially endangering lives. Recognizing those connections is how we move beyond individual headlines and identify the patterns that help keep us aware, prepared, informed, and safe.

28:34 If you want to learn more about why people spy, I recommend you register for my two-day online course at the University of Ottawa in the Professional Development Institute. The course is entitled The Psychology Behind Human Sources and Intelligence Collection. This course highlights case studies that demonstrate what motivates people to portray their countries, beliefs, and cultures to provide information to a foreign state.

28:54 The next available course is March 23rd and 24th, 2027. Registration is limited, so I recommend you register early to guarantee your access to the course. This course can also be credited towards the National Security and Intelligence Certificate Program. I'll leave a link in the show notes and the transcript for those who are interested.

29:10 Well, that's it for this week's episode. I want to wish my Canadian listeners a happy Thanksgiving weekend. I hope that you have and or take the time this holiday to remember what you're grateful for. I know I'm grateful for the time that you took to listen to this podcast. And if you appreciate the effort that goes into each and every episode of the Global Intelligence Weekly wrap-up, then please leave a like, a comment, and share the podcast with others.

29:31 If you want to help support the efforts of the Global Intelligence Knowledge Network, please go to the Buzzboat page and provide a one time or ongoing contribution to the channel. I'll leave the link in the show notes and the transcript. Until next week, stay curious, stay informed, stay safe.