Today's briefing:

  • The Mandelson vetting scandal and what it says about any control that can be overruled

  • France passes 40 crypto kidnappings for the year

  • Iran reopens the Strait of Hormuz for a day before firing on Indian tankers.

Welcome to your Tuesday briefing.

In early 2025, Britain’s vetting service told the government that Peter Mandelson should not be cleared to travel to Washington. The government cleared him anyway. Fifteen months later, the appointment has blown up, the senior civil servant who signed off the override has been fired, and the Prime Minister has told Parliament the whole thing was “unforgivable.” Every organization that lets a senior figure overrule its own controls should be watching this one closely.

Don’t have time to read? Watch 👇

TOP STORY

When the system said no

Mandelson was sworn in as Ambassador to the United States in early 2025. Before he took the job, UK Security Vetting had already told the government he should not be cleared. UKSV is the independent body that runs background checks for sensitive government roles. Its job is to say no when the evidence says so.

The evidence was his business history. His consultancy, Global Counsel, had worked for clients linked to the Chinese state. He had also sat on the board of Sistema, a Russian holding company. Sistema’s chairman is close to the Kremlin, and the company owns a stake in a defense firm that makes technology for Russia’s missile early-warning system.

The Foreign Office used a rarely-used power to overrule the vetting recommendation. Limits were placed on what classified material Mandelson could see, and he took the post. Keir Starmer told Parliament at the time that due process had been followed.

Then came Epstein. In September 2025, the US Department of Justice released emails that revealed the extent of Mandelson’s correspondence with Jeffrey Epstein. He was sacked within days. In February 2026, UK police arrested him on suspicion of misconduct in public office.

The vetting failure itself stayed quiet until April 16, when the Guardian broke the story. The same day, Sir Olly Robbins, the most senior civil servant in the Foreign Office, was effectively fired. On Monday this week, Starmer told Parliament he had been wrong to appoint Mandelson, that being kept in the dark about the failed vetting was unforgivable, and that he had only found out the week before. Robbins gives evidence to the Foreign Affairs Committee today. The Spectator has a counter-account stating that the override followed normal procedure and that Number 10 already knew about the concerns. Who knew what is disputed. What the system did is not.

The same shape turns up everywhere

Strip the politics out of it, and the story is familiar. A control exists. It makes a finding. Someone more senior has the power to overrule the finding. In this case, they used that power.

Every organization that vets senior hires, conducts sanctions or KYC screening for clients, or requires security sign-offs for IT access has a version of this setup. The override exists for good reason. Real life has edge cases that rigid rules handle badly. But the override is only safe when it is written down, named, and visible.

In the Mandelson case, the override existed but was treated as a private favor rather than a documented exception. When it surfaced, nobody who could defend it had a paper trail showing the trade-off had been made on purpose, by a named person, up front.

Our take

Vetting only holds up when the people above it can be held to account. The Mandelson appointment was already agreed before the vetting was finished, so the pressure only ran one way. The override lasted over a year because nothing forced it into the open, and the facts on Russia and China never changed. Only the politics of hiding them did. The practical test for any similar setup is simple. Can anyone in the room name, in writing, the last time an override was used, who used it, what was flagged, and what controls were put around it?

READER POLL

In your own organization, has a vetting or security recommendation ever been overruled by senior leadership for a hire you knew about?

Login or Subscribe to participate

This week’s briefing is brought to you in partnership with…

Stop switching apps. Your browser can do it all.

Every tab you open, every copy-paste into ChatGPT, every lost train of thought — that's your browser failing you. Norton Neo fixes it. Built-in AI works directly inside your session. Hover to preview. Search everything from one bar. VPN and ad blocking included, free.

MEANWHILE

Soft Targets

France has had 41 crypto-related kidnappings or violent home invasions so far in 2026, one every two and a half days. On April 13, four men broke into a family home in Burgundy, tied up a crypto entrepreneur, and demanded €400,000. His money was in a time-locked wallet he could not open on demand. So the gang took his wife and his eleven-year-old son instead. The French GIGN counter-terror unit freed both hostages the following morning and arrested all four suspects. The father had not paid.

What makes this pattern worth watching outside France is the way the gangs pick their targets. They are not tracing crypto wallets. They are using everyday data: tax records, leaked KYC files, social media, conference guest lists, and in one prosecuted case a list sold to them by a former French tax official. Several recent attacks went after family members rather than the asset holder. The signal that puts someone on the list is not a wallet address. It is a name appearing alongside crypto wealth in public, and that kind of data travels.

Closed Again

The Strait of Hormuz was open for less than a day. On Friday, 17 April, Iran’s foreign minister announced full passage, and oil prices fell 11 percent within hours. By Saturday evening, the Revolutionary Guards had closed the strait again and were firing on ships. Two of the three vessels hit were Indian-flagged, including the supertanker Sanmar Herald, carrying nearly two million barrels of Iraqi oil. India called in the Iranian ambassador in Delhi that night.

On Sunday, the US Navy destroyer Spruance stopped and boarded the Iranian-flagged Touska in the Gulf of Oman after firing on its engine room. It was the first US seizure of an Iranian ship since the war began. A US delegation, including Vice President Vance, special envoy Steve Witkoff, and Jared Kushner, was en route to Islamabad for further talks at the time of writing; Iranian state media reports that Tehran has declined to attend. US Central Command says 23 commercial vessels have now turned back from the blockade.

The war is in its eighth week, and the strait cannot be relied on for the rest of it. Corporate energy contracts signed before late February are worth a force majeure check.

Sound even smarter:

  • The World Economic Forum's Global Cybersecurity Outlook 2026 reports that 64% of organizations now factor geopolitical tension into their core threat models. The same report flags a clear shift in cyberattacks against US water and energy facilities away from financial extortion and toward direct manipulation of industrial control systems.

STOP GUESSING. START OPERATING.

Two decades of expert insights you can trust.

SNAPSHOTS

🇸🇩 SUDAN — UN humanitarian chief Tom Fletcher called Sudan an “atrocities laboratory” at the Berlin donor conference on April 16. Donors pledged over $1 billion. Drone strikes have killed 700 people in the country this year, and 130 aid workers have been killed over the last three years.

🇭🇹 HAITI — Gang violence has pushed out of Port-au-Prince into the Artibonite department. UN OCHA reports 13,573 people displaced since attacks began on March 28, across sixteen locations and eleven new displacement sites.

🇨🇺 CUBA — Compounding power cuts, fuel shortages, and broken water and sanitation are combining into a nationwide public health crisis. Around five million Cubans with chronic illnesses depend on electricity for medication, cold-chain supply, or continuous care. Cholera, respiratory infections, and arboviral outbreaks are all rising.

🇺🇦 UKRAINE — Ukraine and Russia completed an exchange of 175 prisoners of war each on April 11, with seven Ukrainian civilians also returned. The UAE brokered the deal. It went through even though the broader US-led peace talks are on hold because of Iran.

EXTRA INSIGHT

HEALTHCARE — Bureau of Labor Statistics data shows healthcare and social service workers experience workplace violence at higher rates than any other sector. A Medscape survey published earlier this year found that 67% of physicians in general hospitals and 69% in medical practice offices feel only slightly protected or worse against violent incidents. Passive surveillance is not enough.

PUBLIC ORDER — Metropolitan Police arrested 523 demonstrators at Trafalgar Square on April 11 during a mass action opposing the proscription of Palestine Action. Those arrested ranged in age from 18 to 87. Over 3,300 people have now been arrested under counter-terror legislation related to Palestine Action since the ban.

A vetting failure in London, a kidnapping in Burgundy, and a chokepoint that opened and closed inside 24 hours. Three different stories, three different domains, one shared throughline. The control existed. The control flagged the right thing. Then something further up the chain decided the flag was negotiable. The work this week is checking that nothing in our own architecture is currently in the same position.

See you next week.

– On The Circuit

If you found this useful, forward it to someone who needs to read it. If someone forwarded this to you, subscribe at https://archives.circuit-magazine.com/

To give or receive feedback, hit reply.

PREVIOUS POLL - RESULTS

Q: The talks failed. The blockade is on. How does this end?

🟨⬜️⬜️⬜️⬜️⬜️ 🇺🇸 The US escalates, and Iran folds under military pressure (12%)
🟩🟩🟩🟩🟩🟩 🇮🇷 Iran outlasts the West on oil prices and forces negotiation (56%)
🟨🟨🟨⬜️⬜️⬜️ 🌍 A third party brokers something nobody saw coming (32%)
⬜️⬜️⬜️⬜️⬜️⬜️ ✍️ Something else. Let us know. (0%)

Your Comments:

SP: "We've underestimated their pain threshold twice now."

RF: "Iran's playing the long game. We're not."

***

OTHER NEWSLETTERS YOU MIGHT LIKE

Become An AI Expert In Just 5 Minutes

If you’re a decision maker at your company, you need to be on the bleeding edge of, well, everything. But before you go signing up for seminars, conferences, lunch ‘n learns, and all that jazz, just know there’s a far better (and simpler) way: Subscribing to The Deep View.

This daily newsletter condenses everything you need to know about the latest and greatest AI developments into a 5-minute read. Squeeze it into your morning coffee break and before you know it, you’ll be an expert too.

Subscribe right here. It’s totally free, wildly informative, and trusted by 600,000+ readers at Google, Meta, Microsoft, and beyond.

Reply

Avatar

or to participate

Keep Reading