XOOMAR
Courtroom and intelligence imagery symbolizing a Ukraine-Russia espionage case and global security tensions.
Global TrendsJuly 6, 2026· 5 min read· By XOOMAR Insights Team

Life Sentence Exposes Dmytro Kozyura's FSB Betrayal

Share
Updated on July 6, 2026

One life sentence now sits at the center of Ukraine’s most sensitive spy scandal in months: Col Dmytro Kozyura, a former senior Security Service of Ukraine official, has been jailed for spying for Russia’s FSB.

XOOMAR Intelligence

Analyst Take

59/ 100
Moderate
4 sources analyzedLow confidenceTrend10Freshness94Source Trust92Factual Grounding90Signal Cluster40

Kozyura was found guilty of high treason under martial law and the illegal handling of weapons, ammunition or explosives by the Shevchenkivskyy District Court in Kyiv, according to BBC World. Prosecutors said he agreed to pass information “constituting state secrets” for financial reward and then systematically disclosed classified material.

Dmytro Kozyura gets life sentence after Ukraine’s “rat” operation

Kozyura was not a peripheral source. He had served as chief of staff of the SBU’s anti-terrorism centre, a role prosecutors said gave him access to state secrets and responsibility for coordinating counterterrorism work.

The SBU said an operation codenamed “rat” found that Kozyura used a safehouse in Kyiv to communicate with Russian handlers who wanted classified information about Ukraine’s military and leadership. After his arrest in February 2025, the SBU released an image showing him alongside Ukraine’s intelligence chief Vasyl Malyuk, who led the investigation.

“Anyone who wears Ukrainian epaulets and begins working for the FSB becomes an enemy of Ukraine,” Prosecutor General Ruslan Kravchenko said. “Only the harshest punishment is appropriate for such individuals.”

The case comes as Kyiv continues to announce operations aimed at exposing Russian agents inside Ukraine since Moscow launched its full-scale invasion in February 2022. That broader wartime setting matters, but the Kozyura case stands out because of where prosecutors say the breach occurred: inside Ukraine’s own security service.

Issue Details from Ukrainian authorities
Conviction High treason under martial law and illegal handling of weapons, ammunition or explosives
Sentence Life in prison
Former role Chief of staff of the SBU anti-terrorism centre
Russian service named FSB
Alleged handler Yuriy Shatalov, described by the SBU as coordinating a network of agents
Operation name “rat”

A 2018 Vienna recruitment claim puts the breach inside Ukraine’s security core

The SBU said after sentencing that Kozyura had been recruited by the FSB in Vienna in 2018, though several years passed before Russian handlers resumed contact in December 2024. Ukrainian authorities said he was then asked to gather information about Russian troop deployment and movement, Ukraine’s weapons, infrastructure, and political and military leadership.

Prosecutors described the alleged activity as systematic. Kravchenko’s office said Kozyura spied on SBU command posts and “systematically” shared the consequences of Russian strikes, including numbers of wounded soldiers and civilians. He was also accused of sharing documents marked “secret” while remaining in “constant communication” with handlers.

“The colonel, a career officer in the SBU, had access to state secrets and was responsible for co-ordinating the fight against terrorism,” prosecutors said.

XOOMAR analysis: The significance is not just that an alleged Russian agent was convicted. It is that prosecutors say the agent sat inside a function tied to counterterrorism coordination and had access to classified information. The source material does not prove specific battlefield damage from the disclosures, and Ukrainian authorities have not publicly detailed every compromised document. But the categories they named, including command posts, weapons, infrastructure and leadership information, are the kinds of material a wartime intelligence service tries hardest to shield.

Ukraine’s security service also claimed it turned the operation back against Moscow before the arrest. The SBU said it “monitored every step of the agent around the clock” and used him to “flood Russian forces with a massive amount of disinformation” while preventing him from accessing important intelligence.

That claim is central to Kyiv’s message: the state was penetrated, but not blind. Whether Ukrainian authorities release enough evidence to support that full counterintelligence narrative is a separate question.

For readers tracking how intelligence institutions become pressure points in other systems, XOOMAR’s separate coverage of Russ Vought Grabs the Keys to Intelligence Budgets examines a very different fight over intelligence power and control. Europe’s internal-security strains also show up in another form in Germany’s 58,700 Far-Right Extremists Rattle Democracy, though that case is unrelated to Kozyura.


February 2025 arrest leaves Kyiv with hard questions about exposure

Kozyura was arrested after SBU officials found he had communicated with a Russian operative from a safehouse using a separate mobile phone and Wi-Fi router, the agency said. The named FSB handler, Yuriy Shatalov, was described as someone whose role was to coordinate a network of agents.

That detail widens the issue beyond one colonel. If Shatalov was coordinating a network, Ukrainian investigators may still be assessing whether Kozyura was one node in a larger structure, whether any other contacts remain active, and whether any classified material was reused by Russian services.

XOOMAR analysis: The most sensitive unanswered question is duration. The SBU says recruitment happened in 2018, contact resumed in December 2024, and arrest followed in February 2025. That timeline gives prosecutors a clear period for the active phase they described, but it does not fully answer what happened in the years between recruitment and renewed contact.

Authorities have also not disclosed whether anyone else inside Ukrainian institutions has been charged in connection with the case. Nor is it clear from the supplied record whether Kozyura will appeal.

The next phase will test how much Ukraine is willing to reveal. More disclosure could reassure the public that the damage was contained, but it could also expose counterintelligence methods or sensitive gaps. Less disclosure protects the service but leaves room for Moscow to exploit uncertainty.

Kyiv has secured the harshest possible sentence. Now it has to show that the breach stopped with Kozyura, or at least that any wider network is being cut down faster than Russia can use it.

Impact Analysis

  • The conviction exposes a serious alleged breach inside Ukraine’s own security apparatus during wartime.
  • The life sentence signals Kyiv’s intent to impose maximum penalties for collaboration with Russian intelligence.
  • The case underscores the ongoing counterintelligence threat Ukraine faces more than two years after Russia’s full-scale invasion.
XOOMAR

Written by

XOOMAR Insights Team

Research and Editorial Desk

The XOOMAR Insights Team pairs automated research with human editorial judgment. We track hundreds of sources across technology, fintech, trading, SaaS, and cybersecurity, cross-check the facts, and explain what happened, why it matters, and what to watch next. We do not just rewrite headlines. Every article is fact-checked and scored for reliability before it goes live, and we link back to the original sources so you can verify anything yourself.

Related Articles

Kremlin, fuel pumps, and missile trails over Eastern Europe in a tense geopolitical news scene.Global Trends

Russia Fuel Shortages Fail to Crack Putin's War Bet

Putin is downplaying Russia fuel shortages while escalating strikes on Ukraine, betting public pain won't slow the war.

Jul 3, 20268 min
Dublin summit scene with world map and glowing links symbolizing Ireland, Ukraine, and EU geopolitical stakesGlobal Trends

Zelenskyy Turns Ireland EU Presidency Into Ukraine Test

Zelenskyy used Ireland’s EU presidency launch to push sanctions, drones and accession, forcing Dublin into a high-stakes Ukraine test.

Jul 3, 20268 min
Monaco blast investigation with global map connections and geopolitical tensionGlobal Trends

Interpol Hunts Suspect After Monaco Bombing Hits Tycoon

Interpol named Anastasiia Berezovska as the suspect in a remote Monaco bombing that wounded tycoon Vadym Yermolaiev and family.

Jul 3, 20265 min
Drones over a burning Baltic oil terminal with global map connections in a geopolitical news sceneGlobal Trends

Ukraine Drones Strike St. Petersburg Oil Terminal Again

Ukrainian drones hit a St. Petersburg oil terminal, pushing Kyiv's campaign deeper into Russia's energy system.

Jul 4, 20266 min
Berlin security scene with Germany highlighted on a global map, symbolizing far-right extremism concerns.Global Trends

Germany's 58,700 Far-Right Extremists Rattle Democracy

Germany now counts 58,700 far-right extremists, and the BfV says right-wing extremism is the top threat to its democracy.

Jul 4, 20268 min
Dark cybersecurity scene with hacked messaging phones, shields, locks, and shadowy cyber attackers.Cybersecurity

US Slaps $10M Bounty on Russian Signal, WhatsApp Hackers

$10M is on the table for tips on Russia-linked groups accused of hijacking Signal and WhatsApp accounts used by officials and journalists.

Jul 5, 20266 min
Metallic space debris balls on a Queensland beach examined with futuristic analysis equipment.Technology

Rocket Debris Cracks Queensland Space Balls Mystery

Six Queensland space balls likely came from a foreign rocket body, but Australia still hasn't named the vehicle or country.

Jul 6, 20266 min
Premium unbranded cooler with ice and dry drawer in a modern sunlit tech-inspired summer setting.Technology

Ninja FrostVault Saves Food From Cooler Slush for Days

Ninja FrostVault still earns its premium price with five-day ice retention and a dry drawer that keeps food out of cooler slush.

Jul 6, 20268 min
Symbolic Australian political apology scene with parliament, microphones, pop spotlight and global map connections.Global Trends

Albanese Kylie Minogue Apology Exposes Podcast Trap

Albanese's Kylie Minogue apology turned a crude podcast bit into a judgment problem for Australia's prime minister.

Jul 6, 20268 min
Screen-free kids audio players and accessories in a sleek tech workspace with deal-inspired lighting.Technology

20% Yoto Player Prime Day Deal Cuts Screen-Free Audio

Yoto Player and Yoto Mini are both 20% off for Prime Day, making the screen-free audio system cheaper for parents ready to buy.

Jul 6, 20267 min

Don't miss the signal

Get our weekly roundup of the stories that matter across tech, fintech, and trading. No noise, just signal.

Free forever. No spam. Unsubscribe anytime.