The Portugal Judiciary Police and Public Prosecutor's Office face mounting criticism after failing to notify the country's Intelligence and Security Service (SIS) of a right-wing extremist group's hit list targeting high-level officials—a breakdown in communication that has triggered a political firestorm and exposed critical gaps in Portugal's counterterrorism protocols.
Why This Matters
• Top officials were targeted but not warned: Prime Minister Luís Montenegro, former President Marcelo Rebelo de Sousa, and Lisbon Mayor Carlos Moedas were named as potential assassination targets by the Movimento Armilar Lusitano (MAL), a neonazi cell accused of terrorism.
• SIS learned from the press: Portugal's national security agency—responsible for evaluating threats to public figures—was never officially briefed, discovering the danger only through media reports.
• Public servants infiltrated the group: Among the 9 defendants are a PSP police chief on secondment to Lisbon Municipal Police and a Navy sergeant suspected of leaking classified military files.
• No protective measures were activated: Because SIS was kept in the dark, no risk assessments or security upgrades were implemented for any of the individuals under threat.
What Went Wrong
Former Assembly of the Republic President Augusto Santos Silva, from the Socialist Party, issued a scathing public rebuke on social media: "How is it possible that the criminal investigation police and the prosecutor's office held information this grave—including plans to physically eliminate the sitting Prime Minister and the President of the European Council—and did not immediately alert the agency that the democratic Republic depends on to assess and combat threats to national security?"
Santos Silva also criticized the "clumsy excuses" offered by senior officials, accusing them of a "complete absence of a minimum sense of state responsibility."
The Public Prosecutor's Office defended its decision, claiming investigators only uncovered the target list late in the probe during a lengthy forensic analysis of 8 terabytes of digital evidence seized from suspects. By the time the list surfaced, the PGR argued, key defendants were already in preventive detention and "no concrete danger existed for any of the entities."
But that explanation has done little to quell the backlash. Prime Minister Luís Montenegro told reporters in Brussels that he was "completely surprised" to learn via the press that his home had been under surveillance and that MAL had discussed launching a grenade attack on his official residence. "If there is a threat involving the use of explosive devices and military weaponry against a citizen's home, that information must be shared to ensure the safety of the people concerned," Montenegro said.
Security Apparatus Under Scrutiny
The Unidade de Coordenação Antiterrorismo (UCAT)—Portugal's national counterterrorism coordination body, which includes the PJ, PSP, National Republican Guard (GNR), SIS, and the Strategic Defense Intelligence Service (SIED)—was also bypassed. A representative from the Prosecutor General's Office attends UCAT meetings, yet the intelligence never made it to the table.
Luís Neves, Portugal's Minister of Internal Administration and former director of the Judiciary Police, insisted that "the information that needed to be shared was shared," but conceded, "there are always aspects that need improvement." Pressed on whether all UCAT members were briefed on the investigation, Neves was blunt: "I will speak as the former national director [of the PJ]—they did not know, and perhaps in part they do not need to know."
Neves argued that the threat had been "neutralized" by arrests before the list was decoded, making immediate notification unnecessary. But that rationale has failed to satisfy critics, who point out that SIS is legally mandated to conduct security assessments on individuals and critical infrastructure—a duty it could not perform without the data.
Justice Minister Rita Alarcão Júdice acknowledged the controversy, confirming she had spoken with both the MP and PJ. "We will all reflect on this, starting with those who have responsibility in the matter. We have already spoken with the entities involved," she said, promising a review to ensure such lapses do not recur.
Inside MAL: A Neonazi Cell with Deep Reach
The Movimento Armilar Lusitano is described by prosecutors as a white supremacist, anti-system, conspiracy-driven organization committed to overthrowing Portugal's democratic regime through violence. The group's target list exceeded 120 names, spanning politicians, journalists, academics, activists, and comedians.
Among the 9 formally accused individuals:
• A PSP police chief seconded to Lisbon Municipal Police, who allegedly accessed official databases to retrieve Montenegro's home address.
• A Navy sergeant now under investigation by Military Judiciary Police for sharing classified files with the group as far back as 2018.
Evidence seized during a June 2025 raid included 3D-printed weapon components, mortar grenades, drone-launched incendiary devices, military-grade explosives, firearms, and ammunition. Prosecutors allege MAL members discussed kidnapping and grenade assaults, though logistical and resource limitations prevented execution.
The group has been monitored since 2021. A coordinated PJ operation in January 2026 also dismantled the allied Grupo 1143, arresting 37 members and exposing further infiltration into public health, security, and political institutions. In December 2022, nearly 600 PSP and GNR officers were flagged for posting racist and hate-inciting content on social media, prompting internal inquiries but no sweeping reforms.
Municipal and Military Fallout
At a public Lisbon City Council meeting, Bloco de Esquerda councilor Carolina Serrão demanded answers from Mayor Carlos Moedas about the Municipal Police officer's role in MAL and his alleged access to sensitive municipal data. "We are dealing with a serious failure in data security systems. Did the executive know? What internal investigations were conducted?" she asked.
Moedas, a center-right Social Democrat, said he had "obviously no information" and was never briefed. "It is truly regrettable that affected citizens are not informed, whoever they may be," he replied, though he offered no details on municipal countermeasures.
The council unanimously passed a resolution—abstained by the right-wing Chega party—expressing "deep concern" over the extremist organization, condemning all forms of neonazi, racist, xenophobic, and anti-democratic ideology, and calling for rigorous accountability for public servants linked to such groups.
What This Means for Residents
For those living in Portugal, the MAL case raises urgent questions about the country's counterterrorism infrastructure and the vetting of security personnel. The SIS operates with fewer legal powers than its European counterparts, particularly in accessing telecommunications metadata—a tool considered essential for preemptive threat detection. Legislative reforms may be forthcoming, especially around information-sharing mandates between the MP, PJ, and intelligence agencies.
The involvement of police and military personnel in extremist cells is not isolated. A 2019 leak of confidential Navy documents to MAL's blog led to a Military Judiciary Police investigation that was ultimately shelved. In 2025, reports surfaced of active-duty soldiers conducting live-fire "war games" training for neonazi recruits. The pattern suggests systemic vulnerabilities in recruitment screening and internal monitoring.
For public officials and journalists on extremist target lists, the episode underscores a troubling reality: even when authorities uncover credible threats, institutional silos and bureaucratic inertia can prevent timely protective action. Montenegro's public frustration—and Santos Silva's unusually pointed criticism—signal that senior political figures across the spectrum view the communication failure as a dangerous precedent.
Accountability and Next Steps
No disciplinary sanctions or criminal charges have been announced against PJ or MP officials for the notification lapse. The Law on Internal Security and regulatory decrees governing UCAT stipulate cooperation duties, but enforcement mechanisms remain opaque. The Justice Ministry has committed to internal "reflection," and parliamentary committees may summon senior prosecutors and police commanders for testimony.
Meanwhile, the 9 MAL defendants face charges including terrorist infrastructure development, weapons manufacturing, recruitment, incitement, and terrorism financing. Their trial will likely test the strength of Portugal's relatively untested anti-terrorism statutes, which were updated in 2019 but have seen limited courtroom application.
The broader concern is not just about one thwarted plot. As right-wing extremism surges across Europe, Portugal's porous security apparatus—marked by delayed intelligence sharing, under-resourced vetting, and the absence of real-time metadata access—may leave the door open for future threats that are not detected in time. For residents, the message is clear: the system that should protect them needs urgent repair.
