Adversary Intelligence — 2026-05-08

Cipher Brief Analysis: Russia and China Exploiting Cuba Infrastructure Crisis to Expand Intelligence Operations Near U.S.

Secretary of State Rubio on April 28 publicly accused Cuba of hosting Chinese and Russian intelligence operations, stating Washington would not permit adversary activity to operate with impunity 90 miles from U.S. territory. A CSIS report identified four Chinese SIGINT facilities in Cuba, including El Salao in Santiago de Cuba roughly 70 miles from Guantánamo, with satellite imagery through March 2024 documenting expansion since 2021. The Cipher Brief reported that Cuba's ongoing infrastructure crisis is opening new avenues for foreign intelligence networks to expand their foothold on the island. An AP report cited unnamed U.S. officials saying no imminent military action against Cuba is under consideration despite Trump administration threats.

Analysis
CSIS commercial imagery establishes construction at El Salao since 2021, predating Cuba's infrastructure collapse and indicating the deterioration adds a recruitment and basing dividend to an already-planted footprint rather than serving as the original entry motive. Cuba may instead be leveraging the perception of foreign intelligence access as bargaining currency, offering partial restrictions for sanctions relief. Washington has settled into a public-pressure posture, short of formally disclosing specific facility capabilities, which would require exposing collection methods the IC will not sacrifice for rhetorical effect. U.S. officials are unlikely to publicly confirm new or expanded collection facilities in Cuba by end of 2026.
2 sources
  1. Getting Our Adversaries Out of Cuba Should be our Immediate Goal - The Cipher Brief
  2. US isn't looking at imminent military action in Cuba despite Trump threats, AP sources say - The Washington Post (AP)

View in full brief →

UNCLASSIFIED // OPEN SOURCE