Allied Intelligence — 2026-09-27

Turkey Probes 22 for Espionage Over Unauthorized Searches of Erdogan Records in Financial Intelligence Database

BLUFFormal indictment of at least one suspect is very likely within three months, as prosecutors have already escalated to detentions and asset seizures signaling political resolve to reassert control over MASAK.

Turkish Justice Minister Akın Gürlek said on September 25 that Istanbul prosecutors opened proceedings against 22 suspects, including a former MASAK deputy chairman, in a political-military espionage probe tied to unauthorized access of the agency's Integrated Financial Intelligence System 12. Five suspects were detained, detention warrants were issued for 16 others reported to be abroad, and one remained sought 1. A technical review found a safeguard protecting records on politically exposed persons had been disabled before searches involving Erdoğan, his family members and several ministers; investigators also flagged possible after-the-fact deletion of data fields and an absence of logs tracking administrator activity 23. Prosecutors said the system's software, developed from 2012 by AGMLAB A.Ş., involved individuals and companies they linked to the Gülen movement, and a court ordered AGMLAB and MRD A.Ş. seized and placed under state fund management 12. Three former MASAK chiefs, Mürsel Ali Kaplan, İbrahim Hakkı Polat and Osman Dereli, are set to be questioned on September 28 23.

Analysis
Formal indictment of at least one suspect within three months is very likely, given prosecutors have already moved to detentions, warrants and asset seizure rather than preliminary inquiry; the disabled PEP safeguard and missing admin logs point to a deliberate breach enabling surveillance of Erdoğan's inner circle, pressuring prosecutors to secure charges quickly and demonstrate control over MASAK. Testimony from three former MASAK chiefs on September 28 will clarify whether culpability was institutional or individual. Moderate confidence reflects converging technical findings but reliance on official statements: two primary Turkish outlets and one English rewrite all trace to the justice minister's single social-media statement rather than independent verification. The espionage and Gülen-infiltration framing may instead serve to consolidate executive control over MASAK's leadership and software contractors rather than reflect a genuine counterintelligence breach. An indictment would confirm Ankara's judiciary will prosecute insider breaches of presidential-level financial data and sharpen foreign vendors' risk calculus on Turkish state software deals; no indictment would mark the probe as political messaging.
3 sources
  1. Siyasi-askeri casusluk soruşturmasında 22 şüpheli hakkında işlem başlatıldı - DHA (Demirören Haber Ajansı)
  2. Turkey probes 22 for espionage over alleged searches involving Erdogan in financial database - Turkish Minute
  3. Former heads of Turkish financial crime body to testify in infiltration probe - Hürriyet Daily News

View in full brief →

UNCLASSIFIED // OPEN SOURCE