Adversary Intelligence — 2026-07-14

Italy Uncovers Russian Spy Network Targeting Western Air Defense Data and Expels Two Russian Diplomats

BLUFAdditional charges from this network are likely within 90 days, exposing a broader Russian compromise of Italian channels carrying NATO air defense and rearmament intelligence.

Italian investigators uncovered a Russian espionage network in Rome collecting data on Western air defense systems supplied to Ukraine, including the Samp-T battery and Leonardo's Michelangelo Dome, the latter slated for a November trial in Ukraine, prompting the arrest of two former Italian intelligence officers 12. Pravda identifies one as Gavino Piras, accused of taking cash from Russian official Mikhail Astakov, identified by Kyiv Post as a suspected GRU officer, for classified data at roughly 4,000 euros per delivery 12. Wiretaps cited by Pravda show requests covering the MBDA CAMM-ER missile, Aster 30 interceptors, Italy's Storm Shadow purchase plans, and NATO/EU rearmament priorities, with five more informants under investigation 1. On July 9 Italy's Foreign Ministry announced the expulsion of two Russian officials tied to the network, described by Pravda as diplomats and by Kyiv Post as military attachés 12.

Analysis
Italian prosecutors will likely bring further arrests or charges among the five informants under investigation within the next 90 days, given wiretap transcripts already entered into court records and the network's public exposure. Additional charges would confirm the compromise reached beyond a single officer into serving personnel with access to Samp-T, CAMM-ER, and NATO rearmament planning, forcing wider vetting reviews across Italian defense and intelligence ranks; confidence is low, resting on a single primary account from ANSA's court-derived reporting that Pravda and Kyiv Post amplified without independent corroboration of the network's full scope. The expulsions and disclosure may instead serve Rome's interest in demonstrating alignment with NATO and Ukraine as much as reflecting the confirmed scale of penetration. Confirmation of further arrests would push NATO partners to reassess classified-access controls and information-sharing with Italian personnel on Samp-T and CAMM-ER programs, while inaction would let allies treat the breach as contained to the two officers already arrested.

3 sources