Sluzhba Zovnishn'oyi Rozvidky Ukrayiny

Sluzhba Zovnishn'oyi Rozvidky Ukrayiny (SZRU) is Ukraine's foreign intelligence service, headquartered in Ukraine. Its core mission involves collecting and analyzing foreign intelligence to support national security and policy decisions. The agency conducts operations abroad, primarily through officers deployed under diplomatic cover at embassies located in more than twenty nations. This diplomatic cover provides a legal framework for intelligence activities while stationed overseas. SZRU also embeds personnel within major international organizations, including the United Nations, European Union, and NATO, to gather strategic information and monitor diplomatic developments. These placements allow the service to access sensitive discussions and networks relevant to Ukraine's interests. The agency maintains a physical infrastructure of intelligence facilities, with over forty locations previously identified in security breaches. Among these is a covert training institution responsible for preparing operatives for foreign assignments. The operational methods highlighted—use of diplomatic cover and placement within international bodies—are central to its foreign intelligence mandate. The service's activities and network were starkly exposed in a significant 2022 incident.

In September 2022, a Russian hacker group named RaHDIt publicly disclosed sensitive data pertaining to approximately 1,500 individuals affiliated with SZRU. The leak revealed the identities and cover details of intelligence officers operating under diplomatic cover in embassies across more than twenty countries. It also exposed personnel embedded within international organizations such as the UN, EU, and NATO, compromising their covert roles. Furthermore, the disclosure identified over forty intelligence facility locations associated with the service, including its covert training institution. This breach followed an earlier attack by the same group targeting a Ukrainian military intelligence directorate, indicating a sustained campaign against Ukraine's intelligence community. The incident provided a rare public view into the scale and geographic spread of SZRU's human network and physical infrastructure. The exposure of operational details and cover identities represents a serious counterintelligence event, directly impacting the security and efficacy of the service's overseas personnel and facilities. The data leak underscored the vulnerability of even sophisticated intelligence services to cyber-enabled disclosure of sensitive operational information.