Editor’s Note: This column was originally published in The Sunday Island, a Colombo-based weekly newspaper.
A former German intelligence chief has been arrested on suspicion of treasonous espionage just as a former senior CIA official has pleaded guilty after using his government position to defraud the United States of approximately $194 million, including the acquisition of 298 gold bars, both reported last week. David J. Rush fabricated highly classified government programmes to create the appearance of legitimate authority and divert public money into property, gold and luxury assets. US prosecutors also say he admitted giving a foreign government official information identifying a secret American intelligence source.
August Hanning, Germany’s former BND chief, faces a very different set of allegations. German prosecutors accuse him of obtaining classified BND information through a former subordinate who remained inside the agency and of using some of that material in dealings involving foreign intelligence. Hanning denies wrongdoing and hasa not been convicted. The cases differ. One concerns a guilty plea to fraud, the other an espionage investigation. Their near-simultaneous appearance exposes a vulnerability in modern intelligence services. Secret institutions depend on trust, yet that trust creates opportunities for abuse from within, especially when privileged knowledge survives a person’s relationship with the state.
The Bundesnachrichtendienst (BND) is being prepared for a more active role as Germany faces Russian espionage, cyber operations, sabotage and other forms of hybrid pressure. The proposed legislation would expand its ability to interfere with foreign computer systems and conduct disruptive operations. Peter Neumann, the security scholar interviewed by Die Zeit, sees the change as overdue. Germany, he argues, cannot expect French, British and Dutch services to possess capabilities that Germany itself restricts while relying heavily on allied intelligence, particularly from the United States. Former Justice Ministry official Peter Schantz accepts that German capabilities need strengthening but questions whether wider powers provide the answer. His concern centres on sabotage, cyber countermeasures, escalation and political responsibility. The disagreement is about the boundary between intelligence collection and state action.
A failed intelligence operation can produce bad information. A failed sabotage operation can produce casualties, retaliation and an international crisis. Schantz has questioned whether the Independent Control Council, despite its legal review function, provides sufficient political accountability for sensitive operations. Neumann, by contrast, argues that excessive legal and procedural restrictions have made German intelligence slower and less effective than comparable European services. The more consequential an operation becomes, the harder it is to separate legality, secrecy and political responsibility. It concerns the institutional consequences of moving an intelligence service from observing foreign activity towards intervening directly in it. Once the BND possesses capabilities designed to disrupt foreign systems, questions about authorization, review and responsibility become inseparable from the operational purpose of those capabilities.
The Hanning investigation gives this debate a serious internal dimension. Prosecutors allege that Hanning, who led the BND from 1998 to 2005, later obtained roughly 2,000 documents from Manfred D., a former office manager who remained inside the agency and worked for Hanning’s successors until 2026. Investigators allege that some documents came from sensitive BND reporting and could have contained information originating with partner services. The concern is the alleged channel through which it was obtained. A former chief did not allegedly need to penetrate the agency from outside. Prosecutors say a trusted former colleague remained an information link into an organization whose value depends on controlling access. Hanning’s arrest is not proof of guilt, but the allegations raise questions about how effectively the BND detects misuse of privileged relationships.
History provides several reminders. Aldrich Ames betrayed the CIA to the Soviet Union, Robert Hanssen spied for Moscow from inside the FBI, Kim Philby reached senior British intelligence positions while secretly working for the Soviets, and Günter Guillaume penetrated West Germany’s political centre for East German intelligence. These cases are not equivalents of Hanning’s allegations. Their relevance is narrower. Intelligence organizations are unusually exposed to insiders because sensitive information is concentrated in trusted individuals. Hanning’s case, if the allegations are established, would add a different dimension because the alleged access occurred after he had left the BND. The question then extends beyond the classic insider threat to the relationship between intelligence agencies and their former senior personnel.
Senior intelligence officers leave office with knowledge, contacts and reputations built through decades of public service. Moving into consultancy or corporate work is not inherently improper. Yet the boundary between expertise and privileged access can become difficult to police when former officials continue dealing with people connected to foreign governments, security businesses or sensitive disputes. A former intelligence chief can enter a boardroom carrying decades of public investment in his expertise. The issue is whether classified information, institutional relationships or official prestige can become private assets. That concern is particularly relevant when a former official’s commercial value is closely connected to the networks developed while holding public authority. The difficulty lies in the point where legitimate professional experience becomes access to information or relationships that were created for public purposes.
The Rush case shows another side of the same vulnerability. According to US prosecutors, he created fictitious classified programmes and used the authority surrounding them to make fraudulent transactions appear legitimate. The result was a diversion of public money into private wealth. His case is not an espionage equivalent to Hanning’s, but it demonstrates how secrecy and official authority can obstruct ordinary scrutiny. The fewer people authorized to know what a programme is, the more important internal controls become. Secrecy protects intelligence work, but without effective controls it can also shield misconduct.
Germany faces a more difficult security environment. Neumann’s concern about dependence on allied intelligence is legitimate, particularly when Germany expects partners to share sensitive information while its own service has more limited powers. Capability also creates a security burden. An agency authorized to conduct offensive cyber operations will possess more access, more technical capacity and more sensitive information. The question is whether safeguards are equally strong. If partner services believe sensitive material can move from the BND into private networks, cooperation becomes more difficult.
The treatment of former intelligence officers belongs here. Retirement can create a combination of vulnerability and influence. Former officers may lose institutional protection while retaining knowledge valuable to private interests. Professional reputation can become a commercial asset, while accusations can destroy reputations before a court establishes the facts. Hanning remains legally entitled to the presumption of innocence. If the allegations collapse, reputational consequences remain; if proved, the case raises questions about internal controls. The affair demonstrates that retirement is not a clean break from senior intelligence responsibilities. Former officials remain part of the institutional history of the services they once led, and their subsequent activities can affect perceptions of those institutions even when no criminal conduct is established.
Germany’s problem is not unique. Every nation-state faces the dilemma of maintaining capable intelligence services while protecting people who may carry their secrets, networks and responsibilities long after formal service has ended. Greater operational capability also increases the importance of authorization, oversight, internal security and post-service restrictions. If classified material moves into private networks, confidence between intelligence services becomes harder to maintain.
The arrest of Hanning and the Rush guilty plea arrive at a significant moment for modern espionage. Neither case proves that intelligence agencies are inherently corrupt, and the two men face different legal circumstances. Their significance lies in a common institutional problem. Intelligence services concentrate information, authority and trust in a small number of people. That concentration is necessary, but it also creates opportunities for abuse, insider compromise and conflicts of interest.
