Budapest: ten expelled, and Moscow loses its easiest EU posting
Hungary ordered ten members of the Russian mission in Budapest out of the country on 8 September, saying they had been engaged in activities unacceptable for diplomats under the Vienna Convention. That is the formula a host state uses when it has decided accredited diplomats were doing intelligence work. No specifics were given.
The number is unremarkable by European standards since 2022. The country is not. Hungary was one of the few European Union states that did not expel Russian diplomats after the full-scale invasion, and for years it was among the most permissive operating environments Moscow had inside the Union. That is what changed on 8 September.
↓ Download one-page brief (PDF)April 2026 - the government changes
Viktor Orban loses the election after sixteen years. Peter Magyar takes office, and Hungarian policy on Russia begins to move.
Hungary restates its position on Russia
Budapest adopts a foreign-policy line identifying Russia as a security threat, and describes Russia as a threat to Europe and the global order in its United Nations General Assembly guidelines.
8 September 2026 - ten are ordered out
The foreign minister announces the expulsion of ten members of the Russian mission under the Vienna Convention formula, without specifics, and states that relations are not being broken off.
Moscow promises a response
Maria Zakharova says the response will be harsh and painful and blames a Russophobic lobby in Budapest. No reciprocal action had been announced at the time of writing.
Kyiv welcomes it
Ukraine's foreign minister, Andrii Sybiha, calls the decision very timely and sensible and says it strengthens Hungary's security - a notable exchange between two governments whose relations were poor under the previous administration.
Berlin
The German government attributed the Leipzig/Halle airport drone to Russia and closed the Russian consulate in Bonn. Reported by Scorpius as Leipzig/Halle.
Bucharest
The Romanian Intelligence Service disclosed a disrupted reconnaissance tasking it attributes to coordination by entities of the Russian Federation, and prosecutors charged a Russian citizen. Reported by Scorpius as Romania.
Budapest
Ten Russian diplomats expelled under the Vienna Convention formula. No specifics published.
Two of these are responses to something that was done and one is a response to something that was found. No authority has connected any of them to any other, and the Hungarian announcement cites nothing at all. What is visible is a shortening interval between European states acting publicly against Russian state activity, and a widening of that behaviour to a capital that had previously declined to join it.
The country is the story, not the number
Ten is an ordinary figure for a European expulsion. Hungary is not an ordinary place for one. Budapest sat out the expulsions that followed the 2022 invasion, and for years the Russian mission there operated with less friction than almost anywhere else in the Union. The signal is that the exception has ended, and that matters more to a service planning its European posture than the headcount does.
The Vienna formula is the whole of the public evidence
Budapest published no activity, no names, no sites and no case. It is likely that the ten were removed over intelligence work under diplomatic cover, on the strength of the wording used, the number involved and the near-universal practice behind that form of words. It remains a reading of a phrase. Anyone briefing this as a disclosed espionage case is going further than Hungary has.
A change of government produced a change of counter-intelligence posture
Nothing in the public record suggests a new discovery in September. What changed in April was who decides. The tolerance an intelligence service enjoys in a host state is a political setting, not a technical one, and it can be changed by an election without a single new fact coming to light.
Expect the reply, and expect it to be aimed at reporting
Zakharova's language points to reciprocal expulsions. It is highly likely that Hungary loses diplomatic staff in Moscow in return, which in practice degrades Hungary's own reporting from Russia and its ability to help its nationals there. That cost is real and falls on the smaller service in the exchange.
Where this goes
It is likely that further European expulsions follow over the next year, given the tempo of disclosed cases. It is a realistic possibility that Hungary publishes some account of what the ten were doing, most probably if Moscow retaliates in a way Budapest wants to justify. It is unlikely that removing ten posts reduces Russian collection against Hungary for long; cover is rebuilt, and the work moves to people without accreditation, which is harder to see and harder to expel.
Expelling officers under diplomatic cover does not end collection - it moves it. The cases running elsewhere in Europe this month were not run by accredited diplomats at all: in Romania a resident foreign national photographing bases for seven months, in Poland and Munich recruited proxies with lighters and cheap devices. Closing the embassy route makes the proxy route more attractive, and the proxy route is the one that arrives at your fence.
- Do not read an expulsion as a reduction in threat to your site. Accredited officers are not the people who turn up at a perimeter. The activity most likely to reach a commercial or infrastructure operator is run through locally recruited proxies, and that route gets busier, not quieter, when the diplomatic one closes.
- Expect a reciprocal move and plan for the consular gap. If you have people or interests in Russia and you rely on Hungarian - or any small-state - consular support there, assume it thins after a tit-for-tat expulsion.
- Treat host-state tolerance as a variable, not a constant. The operating environment in a country can change with an election rather than with any new fact. Country risk assessments that were written against the previous government need re-reading, in both directions.
- Watch for displacement, not disappearance. Collection that ran from Budapest has to run from somewhere. Neighbouring states, commercial cover and non-accredited residents are where it goes.
- Keep the standard of proof honest in your own briefings. Hungary published a form of words and nothing else. If your report says espionage was proven, it has invented the proof.
- https://www.euronews.com/my-europe/2026/09/08/hungary-expels-10-russian-diplomats-for-unacceptable-activities
- https://www.themoscowtimes.com/2026/09/08/hungary-expels-10-russian-diplomats-for-unacceptable-activities-a93659
- https://www.aljazeera.com/news/2026/9/8/hungary-expels-russian-diplomats-over-unacceptable-activities
- https://kyivindependent.com/hungary-kicks-out-10-russian-diplomats-as-moscow-vows-harsh-retaliation/
Compiled from open-source reporting for professional security discussion. This is a protective-security lessons-learned assessment, not an operational account. Hungary has published no account of what the ten diplomats are alleged to have done, has named none of them, and has cited only the Vienna Convention formula; the reading that this concerns intelligence activity under diplomatic cover is Scorpius's and is banded accordingly. Sources differ on the announcing minister's title: Euronews, The Moscow Times and the Kyiv Independent give Anita Orban as foreign minister, Al Jazeera as deputy prime minister, and both are recorded rather than reconciled. Sources also differ on when the Magyar government took office, in the spring following the April election. No reciprocal Russian action had been announced at the time of writing. The map plots capitals and no authority has connected the three events shown on it.