Investigation of Former SHISH Director Vlora Hyseni Triggers national Security Council Meeting
The criminal investigation of Albania’s former intelligence chief prompts her dismissal, an interim leadership change and an extraordinary high-level review of classified-information security and institutional safeguards.
Albania’s security institutions faced one of their most sensitive episodes of 2026 after prosecutors opened a criminal investigation into Vlora Hyseni, then Director of the State Intelligence Service, SHISH. The case acquired immediate national-security implications (pasoja për sigurinë kombëtare) because it concerned the head of the institution responsible for collecting and protecting some of the country’s most sensitive intelligence. President Bajram Begaj subsequently convened the National Security Council to consider the institutional ramifications (pasoja institucionale) of the case. The meeting focused not on determining Hyseni’s guilt or innocence but on strengthening the safeguards (masa mbrojtëse) surrounding Albania’s security institutions.
The immediate legal developments occurred on September 21 and 22, when the Special Court against Corruption and Organised Crime accepted measures requested by SPAK. Hyseni was placed under house arrest (arrest shtëpie) and suspended from exercising public office while the investigation continued. She returned to Albania and surrendered (u vetëdorëzua) to authorities at the Morinë border crossing on September 22, after the measure had initially not been executed because she was outside the country. These actions represented precautionary judicial measures (masa gjyqësore) rather than a final judgment on the accusations against her.
SPAK is investigating Hyseni in criminal proceeding No. 20/1 of 2025 on suspicion of two offences under the Albanian Criminal Code. One allegation concerns assisting the perpetrator (përkrahje e autorit të krimit) under Article 320/2. The second concerns the alleged disclosure (zbulim) of secret acts or information under Article 295/a/1. Prosecutors suspect that classified material may have been made available to businessman Ergys Agasi, creating a particularly serious question of confidentiality (konfidencialitet) because of Hyseni’s position at the top of the intelligence service.
The allegations are linked to a wider investigation involving Agasi, who has faced accusations connected with organised crime and a case involving Albania’s National Agency for Information Society. Investigators are examining possible communication (komunikim) between Hyseni and Agasi while the latter was being sought by authorities. Any transfer of genuinely classified intelligence would raise questions about the possible compromise (komprometim) of protected state information. Nevertheless, these remain prosecutorial allegations subject to judicial verification (verifikim) and Hyseni is entitled to the presumption of innocence until a final court decision.
Prime Minister Edi Rama reacted to the measures against Hyseni while attending the United Nations General Assembly in New York. He announced her immediate dismissal (shkarkim) from leadership of SHISH while stressing that the criminal case should be investigated independently. Rama also emphasised the principle of presumption of innocence (prezumim i pafajësisë) until a final judgment is issued. His response sought to separate Hyseni’s individual legal liability (përgjegjësi juridike) from the need to preserve the credibility and continued functioning of the intelligence institution itself.
President Begaj formally completed the dismissal through Decree No. 506 on September 22 after receiving the Prime Minister’s proposal. The decree took immediate effect (efekt të menjëhershëm) under the Constitution and the law governing the State Intelligence Service. This rapid institutional succession (kalim institucional) prevented the intelligence service from remaining formally led by an official suspended from public duty. The procedure also demonstrated the constitutional division of responsibility (ndarje përgjegjësish) between the Prime Minister, who proposes the SHISH director’s dismissal, and the President, who issues the decree.
The government then moved quickly to establish temporary leadership at SHISH. Elvis Lila, director of the service’s Operational Department, received temporary delegation (delegim) of the director’s administrative powers. His appointment provided institutional continuity (vazhdimësi) while the government considered a permanent successor. Maintaining an uninterrupted chain of command (zinxhir komandimi) is especially important in an intelligence organisation whose operational work cannot simply stop because its political or administrative leadership changes.
President Begaj also held separate meetings with senior security officials on September 24 as the institutional consequences of the investigation were being assessed. He met Interior Minister Ervin Demo, State Police Director General Skënder Hita and acting SHISH chief Elvis Lila to discuss the developing security situation (situatë sigurie). These consultations allowed the Presidency to examine possible institutional vulnerabilities (cenueshmëri institucionale) before the wider National Security Council meeting. They also reinforced the importance of coordination (bashkërendim) among police, intelligence and political institutions during an unusually sensitive period.
Begaj convened the National Security Council on September 28 at the Palace of Brigades in Tirana, with proceedings beginning at 08:30. The meeting lasted approximately 90 minutes and brought together the country’s principal security authorities (autoritete të sigurisë). Prime Minister Edi Rama, Parliament Speaker Niko Peleshi and senior ministers participated alongside the heads of key security institutions (institucione). The gathering represented an unusually high-level consultation (konsultim) prompted by concerns extending beyond the criminal investigation itself.
The Council normally brings together senior officials with responsibilities covering defence, internal affairs, foreign policy, finance, intelligence and policing. For this meeting, representatives of the General Prosecutor’s Office and SPAK were also invited (ftuar) in addition to the members established by law. Their presence reflected the important intersection (ndërthurje) between criminal justice and national-security responsibilities created by the Hyseni case. Acting SHISH director Elvis Lila also participated, providing the Council with direct institutional representation (përfaqësim) from the intelligence service.
A central subject of discussion was the protection of classified information when senior security officials become subjects of criminal investigations. Intelligence agencies handle material whose unauthorised release can create serious exposure (ekspozim) for national interests, investigations or international partners. Governments therefore need procedures capable of rapidly limiting unnecessary access (qasje) when credible legal concerns arise. The Hyseni case highlighted the importance of institutional containment (kufizim i pasojave) before an investigation has established exactly what information, if any, may have been compromised.
The Presidency’s official statement after the meeting emphasised cooperation rather than competition between institutions. Begaj’s office called for greater inter-institutional cooperation (bashkëpunim ndërinstitucional) and professional communication among bodies carrying different security responsibilities. It also stressed the importance of closer coordination (koordinim) with Albania’s international partners and allies. The objective was to prevent institutional mistrust (mosbesim institucional) from becoming an additional security problem at a moment when cooperation was particularly necessary.
Another important conclusion concerned the independence of the criminal investigation itself. The Council stated that justice institutions must be allowed to operate with full independence (pavarësi) and that their work should be respected by all other institutions. At the same time, officials argued that an individual criminal case should not automatically generate a broader crisis of confidence (krizë besimi) in the Albanian state. Preserving institutional credibility (besueshmëri) therefore requires both an uncompromised investigation and evidence that security institutions can continue functioning normally while that investigation proceeds.
This balance is particularly important because the National Security Council is not itself a court or investigative authority. It functions as an advisory body (organ këshillimor) assisting the President in exercising constitutional and legal responsibilities. The Council does not issue criminal judgments or make binding decisions (vendime) concerning individual defendants. Its meetings are conducted behind closed doors, reflecting the confidential nature (natyrë konfidenciale) of many national-security discussions.
The investigation of a serving intelligence director is intrinsically more sensitive than an ordinary criminal proceeding involving a public official. Intelligence chiefs may possess extensive clearance (autorizim sigurie) to access information concerning threats, operations, sources and foreign partners. A potential security breach can therefore have a much wider compartmentalisation (ndarje e informacionit) problem than misconduct in an institution handling ordinary administrative data. Protecting intelligence sources and methods (burime dhe metoda) is essential because disclosure can endanger individuals and make future intelligence collection more difficult.
International confidence is another important consideration because modern intelligence work depends heavily on exchanges between allied services. Foreign agencies share sensitive material partly on the assumption that the receiving institution has adequate information security (siguri informacioni) procedures. A major breach can weaken that trust relationship (marrëdhënie besimi) even when the wider institution was not responsible for the conduct under investigation. Albania therefore has a strong strategic interest in demonstrating reliable countermeasures (kundërmasa) and internal controls to NATO allies and other international partners.
The Presidency specifically emphasised cooperation with Albania’s partners and allies following the Council meeting. Maintaining international reassurance (siguri ndaj partnerëve) requires demonstrating that possible vulnerabilities are being identified rather than concealed. An internal investigation or audit can help establish the full scope (fushëveprim) of any potential compromise and determine whether corrective measures are necessary. Such reviews are a normal component of institutional risk management (menaxhim rreziku) after serious allegations involving access to classified information.
By September 30, Parliament’s Security and Defence Committee chairman Bledi Çuçi said a deeper audit of SHISH was expected to examine whether the case had affected the service’s functioning. He indicated that another National Security Council meeting could follow after this audit (auditim) was completed. Such an examination could identify weaknesses in internal controls (kontrolle) governing classified materials, communications and senior-official access. A second meeting would allow political and security leaders to consider any necessary remediation (masa korrigjuese) based on the audit’s findings rather than speculation.
The case has also renewed attention on parliamentary oversight of intelligence organisations. Effective intelligence oversight (mbikëqyrje) must ensure accountability without publicly exposing information whose secrecy is genuinely necessary. Parliamentary committees can examine institutional governance (qeverisje) and legal compliance while respecting operational confidentiality. Achieving this balance requires considerable discretion (maturi) because excessive secrecy can weaken accountability while excessive disclosure can itself damage national security.
The permanent leadership of SHISH remained another important issue after Hyseni’s dismissal. Rama announced that he intended to consult President Begaj before proposing a new director (drejtor) for the intelligence service. Selecting a permanent chief requires particular vetting (verifikim të hollësishëm) because the position provides access to extremely sensitive national and allied intelligence. The transition therefore places renewed emphasis on institutional integrity (integritet) and the standards expected of senior security officials.
Hyseni, meanwhile, continued to exercise her procedural rights within the criminal justice system. On September 29, her lawyer filed an appeal (ankim) against the house-arrest measure with the Special Court of Appeal. The filing allows a higher judicial body to examine whether the original security measure (masë sigurie) was justified under the applicable legal standards. This appellate process is an important element of due process (proces i rregullt ligjor) and again underlines that the investigation had not produced a final determination of guilt.
The episode also illustrates a fundamental tension surrounding public communication in intelligence-related cases. Citizens reasonably demand transparency (transparencë) when allegations involve the head of a major state institution. Yet authorities may be legally unable to disclose much of the underlying classified material (material i klasifikuar) without creating precisely the security risks they are attempting to investigate. Responsible communication therefore requires a careful equilibrium (ekuilibër) between public accountability and legitimate secrecy.
President Begaj’s message after the Council meeting concentrated heavily on this institutional dimension. He called for stronger standards, accountability (llogaridhënie) and oversight so that citizens could see that state institutions were capable of correcting problems internally. The Presidency also emphasised restoration of public trust (besim publik) instead of allowing one investigation to undermine confidence in the entire security system. This principle of institutional self-correction (vetëkorrigjim institucional) may ultimately become one of the most important tests arising from the Hyseni case.
The investigation has therefore developed into something much broader than the legal position of one former official. It has become a test of Albania’s ability to protect classified information (informacion i klasifikuar) while permitting prosecutors and courts to investigate senior security officials independently. It has also tested the resilience (qëndrueshmëri) of SHISH during a sudden leadership transition and heightened political scrutiny. The September National Security Council meeting represented an attempt to ensure that individual allegations do not develop into a wider institutional security crisis (krizë sigurie).
For Albania, the longer-term consequences will depend on what investigators, courts and the internal review of SHISH eventually establish. A credible process requires complete fact-finding (mbledhje faktesh) without political interference or premature conclusions about Hyseni’s guilt. Security institutions will simultaneously need to identify and correct any procedural vulnerabilities (cenueshmëri) exposed by the investigation. If those processes remain independent and effective, the episode could ultimately strengthen institutional resilience (qëndrueshmëri institucionale) rather than permanently weakening confidence in Albania’s intelligence system.
Key Albanian Vocabulary
pasoja për sigurinë kombëtare national-security implications
pasoja institucionale ramifications
masa mbrojtëse safeguards
arrest shtëpie house arrest
u vetëdorëzua surrendered
masa gjyqësore judicial measures
përkrahje e autorit të krimit assisting the perpetrator
zbulim disclosure
konfidencialitet confidentiality
komunikim communication
komprometim compromise
verifikim verification
shkarkim dismissal
prezumim i pafajësisë presumption of innocence
përgjegjësi juridike liability
efekt të menjëhershëm immediate effect
kalim institucional succession
ndarje përgjegjësish division of responsibility
delegim delegation
vazhdimësi continuity
zinxhir komandimi chain of command
situatë sigurie security situation
cenueshmëri institucionale institutional vulnerabilities
bashkërendim coordination
autoritete të sigurisë security authorities
institucione institutions
konsultim consultation
ftuar invited
ndërthurje intersection
përfaqësim representation
ekspozim exposure
qasje access
kufizim i pasojave containment
bashkëpunim ndërinstitucional inter-institutional cooperation
koordinim coordination
mosbesim institucional mistrust
pavarësi independence
krizë besimi crisis of confidence
besueshmëri credibility
organ këshillimor advisory body
vendime decisions
natyrë konfidenciale confidential nature
autorizim sigurie clearance
ndarje e informacionit compartmentalisation
burime dhe metoda sources and methods
siguri informacioni information security
marrëdhënie besimi trust relationship
kundërmasa countermeasures
siguri ndaj partnerëve reassurance
fushëveprim scope
menaxhim rreziku risk management
auditim audit
kontrolle controls
masa korrigjuese remediation
mbikëqyrje oversight
qeverisje governance
maturi discretion
drejtor director
verifikim të hollësishëm vetting
integritet integrity
ankim appeal
masë sigurie security measure
proces i rregullt ligjor due process
transparencë transparency
material i klasifikuar classified material
ekuilibër equilibrium
llogaridhënie accountability
besim publik public trust
vetëkorrigjim institucional self-correction
informacion i klasifikuar classified information
qëndrueshmëri resilience
krizë sigurie security crisis
mbledhje faktesh fact-finding
cenueshmëri vulnerabilities
qëndrueshmëri institucionale institutional resilience
