Photos, takeoff time and base location: the SBU uncovered a network that was "hunting" F-16s and Mirage 2000s
The flight schedules of combat helicopters were provided by the commander of the aviation squadron of the Armed Forces of Ukraine
The SBU’s military counterintelligence uncovered a large-scale agent network of the Russian GRU, whose members collected information on Ukrainian combat aviation. According to the security service, the information obtained could have been used by the enemy to prepare missile strikes on the air bases of the Armed Forces of Ukraine where the F-16 and Mirage 2000 fighters are stationed.
The SBU reported the results of the operation on 13 August 2026.
The SBU said the agent group consisted of 14 people who lived in various regions of Ukraine. According to the investigation materials, the network’s activity allowed the enemy to collect data necessary for planning attacks on Ukrainian forces’ airfields. The military counterintelligence carried out the operation under the personal coordination of SBU head Oleksandr Poklad.
According to the investigation, the Russian GRU initially recruited a resident of Lviv who administered a Telegram channel dedicated to aviation. He came into the sights of Russian military intelligence after posting photos of the Armed Forces of Ukraine’s combat aircraft in pro-Kremlin chats.
To carry out the tasks of his Russian handler, the Lviv resident, the SBU says, covertly involved another 13 of his subscribers. These were people from different regions who had high-quality photo equipment and lived near defense aviation infrastructure facilities.
Network members were to photograph Ukrainian airfields, military aircraft, crews and technical personnel, and also record the times of take-offs and landings of aircraft. They were allegedly told that the materials were needed for the aviation Telegram channel of the Lviv blogger.
For observing air bases, the suspects, according to the SBU, used professional cameras and disguised themselves in abandoned buildings or in open areas near military facilities. They uploaded the obtained photographs to an online storage to which the organizer had access. From there the materials were passed on to the Russian handler, whose identity the SBU has already established.
Separately, the investigation established that the Telegram channel administrator passed flight and landing schedules of combat helicopters to the Russians. According to the security service, he received these data from the commander of a Ukrainian Air Force squadron, who provided the information on his own initiative.
During searches, law enforcement seized smartphones, digital photo equipment and photographs of the Defense Forces’ aviation facilities, which the SBU calls evidence of illegal activity.
In addition, the security service blocked 4 Telegram channels and 10 themed groups that were publishing photographs and other information about aviation units of the Armed Forces of Ukraine.
“Anyone who agrees to work in the interests of Russia should understand: the SBU will definitely hold you accountable.”
The detained agent, his accomplice and a serviceman have been notified of suspicion of committing crimes against the foundations of national security. The investigation continues, and law enforcement are determining the role of all those involved in the network. Comprehensive measures were carried out by employees of the SBU’s military counterintelligence under the procedural guidance of the Lviv Regional Prosecutor’s Office.
The Security Service also urged Ukrainians to be especially cautious about suspicious offers on social networks and messengers. Information about suspicious persons, activities of Russian special services, pages and channels that may be used by the enemy for recruitment can be sent to the SBU via the chat-bot ‘Expose the FSB agent’, by number 1516 or by email at callcenter@ssu.gov.ua.
Previously we reported:
- Collected data for Russian strikes on Mykolaiv: SBU detained two Russian agents
- Passed locations of air defenses and AFU depots to the Russians: enemy informant detained in Mykolaiv region
- SBU in Kyiv detained FSB agents: registered 76 Starlink terminals for guiding missiles and drones
- Gmail drafts, a Russian wife and fleeing the front: sailor sentenced to 15 years for treason
- SBU detained an RF agent who attempted to carry out a terror attack in Mykolaiv








