Germany’s former spy chief detained over alleged trade in BND secrets

August Hanning once led Germany’s foreign intelligence service. Long after his departure, prosecutors allege, his connection to an official close to its leadership became a paid supply line of intelligence for private consulting. Now Hanning and former senior aide Manfred D. are both in pretrial detention—a consequential step in a case whose central security question remains unanswered: what actually reached a foreign intelligence service? ^{1 19}

Federal Criminal Police Office agents arrested both men on October 6, 2026. The Federal Prosecutor’s Office said an investigating judge at the Federal Court of Justice put their arrest warrants into effect across October 6 and 7, without assigning each decision to a particular day. France 24/AFP separately confirmed that Hanning was ordered to remain detained on October 7. That outcome supersedes earlier reporting that his judicial appearance was still pending. Detention is not a conviction; neither man’s guilt has been established. ^{9 19 24 4}

Hanning, 80, headed the Bundesnachrichtendienst, or BND, from 1998 to 2005 before working as a private consultant. Manfred D. is described as his former chief of staff, who subsequently worked close to successive service presidents. NPR reports that his later chief-of-staff service ran from 2012 to 2026, although that precise personnel chronology has not been independently established. The institutional significance is the alleged bridge between someone outside government and someone with continued proximity to its intelligence leadership. ^{1 3}

Prosecutors allege that the men agreed in 2010 that Manfred D. would continuously supply valuable BND intelligence to Hanning in exchange for payment. Approximately 2,000 documents allegedly passed to Hanning over the years. Many contained classified information intended for internal BND use. The amount paid, payment schedule and complete transfer chronology have not been publicly established. ^{1 6 8}

That count needs a boundary around it. It describes documents allegedly supplied to Hanning, not a verified total delivered to a foreign government. Nor is every document in the total established as classified. Descriptions of hundreds of classified documents therefore need not contradict an alleged collection of approximately 2,000 papers. ^{8 5}

The detailed suspicions concerning Hanning encompass treasonous espionage, spying out state secrets, attempted treason and espionage. Manfred D. is accused of aiding and abetting attempted treason and treasonous espionage. The procedural record establishes warrants and detention—not a proven completed treason offense, a publicly established formal indictment or the start of a trial. ^{1 19}

There are two distinct foreign-contact allegations. On one occasion, Hanning allegedly used classified material supplied by Manfred D. to draft an analysis intended for an officer of a foreign intelligence service. Whether that analysis reached its recipient remains undetermined. Separately, prosecutors allege that he maintained close contact for several years with a representative of another foreign service and passed on political information partly based on Manfred D.’s material. ⁸

Uncertainty about delivery of the analysis does not erase the separate information-sharing allegation. But the public account does not establish precisely which information reached which recipient or what harm resulted. Prosecutors have not publicly identified the suspected services or clients. ⁸

The duration accounts also concern different conduct. Journalist Florian Flade, speaking on DW, described the prosecutor’s account as alleging about 12 years of document transfers. NPR’s October 7 newsletter described 12 years of political information-sharing after Hanning left office. Neither supplies clear enough endpoints to merge those periods, or to infer that sharing began immediately after his 2005 departure. ^{3 4}

Flade said most of the alleged collection consisted of papers prepared for weekly intelligence briefings to the German government, touching on Iran’s nuclear program, Russia’s military and the war in Ukraine. That description makes the allegations more consequential than an unexplained document count, but it remains reporting about an alleged collection—not an established inventory of material disclosed abroad. ³

WirtschaftsWoche’s reporting points toward Azerbaijan: it alleges that Hanning prepared confidential information for Azerbaijani spies and received BND secrets in paper and digital form. Flade also described Azerbaijani intelligence contacts on DW. Azerbaijan is a reported investigative lead, not a confirmed prosecutorial identification. Preparing information for a prospective recipient is not proof of delivery. ^{30 3}

DW also raised possible commercial use through an agency Hanning worked through in Switzerland. Its identity and any Swiss corporate or financial route have not been established. The alleged consulting use is clearer than the still-incomplete account of how a business might have monetized the material. ^{7 6}

Even the arrest geography remains inconsistent. NPR on October 6 placed Hanning in Bad Tölz-Wolfratshausen, Bavaria, and Manfred D. in Steinfurt. BBC News that day placed Hanning in Nordwalde and Manfred D. in Bavaria. DW News on October 7 described Hanning’s arrest as occurring in Berlin. These are conflicting location accounts, not merely an earlier procedural expectation overtaken by events. ^{1 8 3}

The official announcement confirms arrests in Bad Tölz-Wolfratshausen and Steinfurt counties but does not explicitly pair either with a suspect. BZ specifically reports Hanning’s arrest at his Nordwalde property and separately describes a Berlin apartment search. That distinction matters: a Berlin search cannot be turned into an established Berlin arrest. A fully reconciled person-by-person account remains unavailable. ^{10 15}

The investigative lead reportedly emerged from a search connected with the separate case involving the alleged abduction of Christina Block’s children. AP described a search of Hanning’s home; DW described searches connected with a business associated with him. The precise search date, location and evidentiary chain remain unestablished. This explains how investigators reportedly encountered relevant material, not guilt in either matter. ^{1 6 5}

Hanning’s lawyer Leon Kruse said on October 7: “My client is being unjustly prosecuted.” Dpa reporting separately paraphrased his acknowledgment that Hanning possessed confidential documents. That acknowledgment is not a verbatim quotation or an admission of espionage, selling secrets or unlawful delivery abroad. No detailed legal explanation supporting his objection, or public defense response from Manfred D., has been established. ^{34 35}

Green politician Konstantin von Notz called for a swift, thorough investigation. MDR’s October 7 account quoted his characterization, “Einzigartiger und bestürzender Fall von Landesverrat”—“An unprecedented and appalling case of treason”—and reported his demand for stricter rules governing senior holders of intelligence secrets and stronger oversight. His language is a political assessment, not a court finding. ^{1 36}

Germany is debating expanded operational powers for its intelligence services. This case sharpens a different question: how effectively are existing access and post-government activities controlled? Concerns about BND credibility and partners’ willingness to share intelligence are serious potential consequences, but no documented partner decision to reduce sharing or confirmed public finding of resulting damage has been established. ^{3 5}

Possession of confidential papers is only part of the security accounting. The decisive questions are which material was transmitted, to whom, under what agreement and with what consequences. Until those are answered, the alleged scale of the collection should not be mistaken for a proven scale of foreign disclosure.

NPR: October 6 arrest report ¹; October 7 Up First newsletter ⁴. BBC News: October 6 arrest report ⁸; alternate edition ²⁶; October 7 Berlin security-talks report ².

DW News: October 7 Berlin Briefing discussion ³; attempted-treason and intelligence-trust discussion ⁵; October 6 espionage-scandal report ⁷. Associated Press: October 6 video report ⁶; explanatory article on the allegations ²⁵.

Federal Prosecutor’s Office: October 6 English announcement ⁹; German announcement ¹¹; English reproduction on Presseportal ¹⁰; German reproduction ¹²; October 7 warrant-enforcement follow-up ¹⁹.

Dpa International: arrest report ¹³. Euronews: custody report ¹⁴. France 24: October 6 arrest account ¹⁶; October 7 court outcome ²⁴. The Local: October 7 continued-detention report ²⁰.

BZ Berlin: Nordwalde arrest and Berlin search report ¹⁵. Tagesschau: investigative arrest report ¹⁷; judicial-appearance preview ²¹. Neue Westfälische: Münsterland arrest account ³². The Guardian: October 6 arrest report ³³.

Al Jazeera: October 7 explainer ¹⁸; October 6 arrest account ²⁸. Politico: arrest report ²⁷. AFP: suspected espionage and treason report ²⁹. WirtschaftsWoche: Azerbaijan reporting ³⁰; arrest report ⁴⁰. Brussels Signal: alleged Azerbaijani connection ³¹.

BILD: Leon Kruse’s defense statement ³⁴. Detention and defense reporting: Handelsblatt ²²; Kölner Stadt-Anzeiger ²³; FAZ/dpa ³⁵; Badische Zeitung ³⁸; Lippische Landes-Zeitung ³⁹; Augsburger Allgemeine ⁴¹.

MDR: Konstantin von Notz interview account ³⁶. Nordkurier: intelligence-oversight reporting ³⁷.