Adversary Intelligence — 2026-05-24

SBU Arrests FSB Sleeper Agent Dormant for 12 Years Who Built Informant Network Targeting Ukrainian Officials

BLUFActivation of a 2014-vintage sleeper to target a civilian emergency-management principal signals FSB is broadening strike-support collection beyond military leadership, requiring expanded protective coverage across Ukraine's senior civilian cadre.

Ukraine's SBU announced on May 22 that officers detained an IT specialist from Mykolaiv whom Russian intelligence had recruited in 2014, held dormant for 12 years, and activated earlier this year to operate in Kyiv 123. Since February, the SBU reported, he had been gathering missile strike coordinates targeting the Kyiv residence of Ukraine's State Emergency Service chief and tracking addresses and movement routes of senior politicians and defense officials 234. Operating under cover as a computer systems administrator, he recruited an Odesa-based IT colleague, and together they built an informant network collecting data on Ukrainian troop deployments 124. Officers simultaneously detained both, seizing smartphones as evidence; both face treason charges under martial law carrying life imprisonment and property confiscation 13.

Analysis
The Mykolaiv-to-Kyiv operational pattern indicates FSB is repositioning 2014-era sleeper assets from southern Ukraine into the capital rather than cultivating locally resident sources. Targeting the State Emergency Service chief's residence extends Russian strike priority beyond military commanders into civilian emergency management leadership, requiring immediate adjustment to protective coverage for that sector. Simultaneous detention of both principals suggests SBU achieved network-wide surveillance before acting, though the breadth of undetected nodes cannot be assessed. That uncertainty is compounded by the SBU's own press statement being the sole primary source, leaving the claimed network scope corroborated only by the arresting agency.

5 sources

SBU arrests Russian FSB agent preparing strikes on Kyiv - New Voice of Ukraine
A deep-cover FSB agent who was kept on "standby" for 12 years has been detained in Kyiv - Ukrainian News Agency (UNN)
SSU exposes FSB agent network that adjusted russian strikes in Kyiv and Odesa Regions - Ukrainian News (Ukranews)
IT agents who spied for the FSB were detained in Kyiv and Odessa - Dev.ua
SBU: FSB agent kept on standby for 12 years detained in Kyiv for preparing missile strike coordinates - Security Service of Ukraine (SBU) official Telegram channel (@SBUkr)