European intelligence services have dismantled a spy network run by Belarus’ KGB across several EU states, the Czech counterintelligence agency (BIS) announced on 8 September evening. Among the suspects is Alexandru Balan, a former deputy head of Moldova’s Intelligence and Security Service (SIS) and later a diplomat to Ukraine, who was arrested in Romania.
The case highlights how Belarus continues to serve as a channel for Russian influence and espionage inside the EU, testing European security architecture and raising calls for tighter controls on Belarusian and Russian diplomatic movements across Schengen states.
Network linked to Belarus’ KGB
According to BIS, operatives from the Czech Republic, Hungary, and Romania uncovered the network, which relied heavily on Belarusian diplomatic cover to move agents across Europe. The operation was coordinated under the supervision of the EU’s judicial cooperation agency Eurojust.
The Czech Foreign Ministry later confirmed the expulsion of a Belarusian diplomat involved in the case, who was given 72 hours to leave the country.
“To successfully counter these hostile activities in Europe, we need to restrict the movement of accredited diplomats from Russia and Belarus within the Schengen area,” BIS chief Michal Koudelka stated.
Moldovan connection revealed
Romania’s anti-organized crime agency DIICOT said that between 2024 and 2025, the Moldovan suspect met twice with Belarusian KGB officers in Budapest. Investigators have “reasonable suspicion” that the meetings involved transmitting instructions and receiving payments in exchange for state secrets, compromising Romania’s national security.
Romanian and Moldovan media later confirmed the suspect’s identity as Alexandru Balan, a former deputy director of the SIS. Possessing both Moldovan and Romanian citizenship, Balan is accused of leaking classified information and high treason in favour of the Belarusian spy institution (KGB).
Diplomatic mission in Ukraine
After leaving Moldova’s intelligence service, Balan was appointed as a diplomat at the Moldovan Embassy in Kyiv. This fact was not highlighted in this particular case, but it raises a significant concern regarding Mr. Balan’s previous record of activities within his diplomatic position.
The case highlights the vulnerability of diplomatic postings during wartime and the regional risks posed by compromised officials.
Balan’s record of abuses
Commenting to the Romanian press, Moldova’s former Defense Minister Anatol Salaru described Balan as “the main anti-Romania figure in Moldova’s SIS.”
Salaru accused him of recruiting Bessarabian students in Romania for intelligence purposes, orchestrating bribery schemes, and protecting criminals.
Balan also played a role in the notorious 2018 case, when Turkish teachers from a Turkish-Romanian high school in Chișinău were kidnapped and handed over to Ankara at the request of President Recep Tayyip Erdoğan.
The teachers were taken directly from the streets of Chișinău, flown to Türkiye, and immediately jailed, leaving their families behind.
Wider security implications
The exposure of Belarus’ European spy network comes as Minsk deepens its alignment with Moscow. Belarusian dictator Alexander Lukashenko has allowed Russia to use Belarusian territory as a staging ground for the full-scale invasion of Ukraine in 2022, and later approved the deployment of Russian tactical nuclear missiles.
Belarus, under dictator Alexander Lukashenko, remains a close ally of Russia. Moscow not only uses Belarusian territory to stage its war against Ukraine but also seeks to empower pro-Russian forces in neighboring countries, including Moldova. The spy network thus illustrates a broader Kremlin strategy to undermine security across Eastern Europe and destabilize Ukraine’s allies.