Image Source: Getty Images
Biological threats occupy an increasingly complex position within contemporary security governance. In the past few months, these threats, once taboo, have become topical. A case in the United States has also rekindled discussion on the easy access to biological materials that may threaten security. In Cleveland, Ohio, federal authorities indicted Brandon Baxter following the reported discovery of ricin in his apartment.
Another incident that drew international attention occurred in Russia in October, when an employee at the Irkutsk Anti-Plague Research Institute died following severe pneumonia, raising concerns about laboratory safety and possible occupational exposure. Although initial reports suggested a possible link to pneumonic plague, Russian authorities informed the World Health Organization (WHO) that testing had not identified plague or other high-threat pathogens among the deceased worker’s contacts. WHO’s October 2026 assessment noted that the underlying cause of death remained undetermined.
A recent attack in Europe has also made clear that the relationship between cybersecurity and biological security is becoming increasingly relevant. In particular, the November 2026 cyberattack on France’s national blood service showed how hackers could interfere with the control systems of three refrigeration centres. This incident also underscores that biological security is not limited to the physical security of laboratories and dangerous substances, but extends to digital healthcare infrastructure, genetic databases and sensitive medical information.
These cases take on added significance when considered alongside the 1979 Sverdlovsk anthrax outbreak in the Soviet Union. The outbreak, initially attributed to contaminated meat, was later established through epidemiological investigation to have resulted from an accidental release at a military microbiology facility. Although these cases differ in their circumstances and in their investigative or evidentiary status, they reveal a common governance challenge in managing and reporting biological risks that has existed for decades.
The cases differ in their circumstances and evidentiary status, but they reveal a common governance challenge in managing and reporting biological risks, one that has persisted for decades.
These cases take on added significance when set beside the 1979 Sverdlovsk anthrax outbreak in the Soviet Union. Initially attributed to contaminated meat, the outbreak was later established by epidemiological investigation to have resulted from an accidental release at a military microbiology facility. The cases differ in their circumstances and evidentiary status, but they reveal a common governance challenge in managing and reporting biological risks, one that has persisted for decades.
Biosecurity Governance and Institutional Accountability
Biological security is frequently approached through the lens of national security, particularly biological weapons proliferation and deliberate biological attacks. This perspective alone, however, is insufficient. Given the cases above, a broader governance approach is necessary to ensure security and safety across public health agencies, scientific institutions, law enforcement organisations and national governments.
The Cleveland case points to the importance of individual-level biosecurity oversight. According to the US Department of Justice, Baxter was indicted on charges relating to biological weapons and possession of a biological toxin by a restricted person. Authorities reported that material recovered tested positive for ricin. An indictment is an allegation, not proof of guilt, and the case must proceed through the judicial process. This distinction matters not only to the judiciary but also to those reporting the case and informing future policy, as it highlights the importance of balancing precautionary security measures with institutional accountability, transparency and the protection of individual rights.
Biological security is frequently approached through the lens of national security, particularly biological weapons proliferation and deliberate biological attacks. This perspective alone, however, is insufficient.
From a governance perspective, the Cleveland case raises questions about the relationship between criminal justice supervision and biological security regulation. Baxter’s case is not isolated; in India too, a doctor from Hyderabad, Ahmed Mohiyuddin Saiyed, was arrested in November 2025 with two others for planning a ricin attack as part of a bioterrorism plot, raising a similar concern. Another incident involved the alleged preparation of a ricin attack in Cologne, Germany, in 2018. A Tunisian national, Sief Allah H., was arrested for planning the attack. Together, these cases indicate that biological security threats can arise outside laboratories and research environments, raising questions about whether existing regulatory and law enforcement systems can identify, track and address new biological threats.
The Russian case presents a different institutional challenge. Although research labs are expected to be safer (if not safe) environments for hosting and working with biological agents, cases like this one raise concerns about the responsibilities of a specialist research institution operating within the public health system, how it protects its staff and how it reports incidents both domestically and to global governance structures.
The significance of the Sverdlovsk and Irkutsk cases extends beyond their geographical context, showing how the absence of timely and credible information can complicate international assessments, undermine confidence and delay accountability.
For these concerns, transparency and alignment with global governance mechanisms and partner institutes are among the most important dimensions of biological security governance. The significance of the Sverdlovsk and Irkutsk cases extends beyond their geographical context, showing how the absence of timely and credible information can complicate international assessments, undermine confidence and delay accountability. The Cleveland case offers a contrasting institutional setting, in which transparency operates through multiple accountability mechanisms, including judicial proceedings and independent media scrutiny. Information emerged through police records, body-camera footage, federal indictments and investigative journalism.
Regulatory Fragmentation
Transparency has been emphasised as a requirement in discussions surrounding these cases, but its effective enforcement remains an unaddressed gap. The central challenge is the fragmentation of regulatory responsibilities. Biological materials can be accessible outside research, and research activities can have legitimate scientific and public health applications while also creating security risks. Managing this dilemma requires balancing scientific advancement with appropriate security oversight.
An important yet neglected aspect of biological security is institutional credibility and public trust. In the Russian case, conflicting accounts and the absence of a definitive cause of death for the employee risk undermining public confidence. The Cleveland case, similarly, requires a balance between raising awareness of biological security threats and avoiding premature conclusions. The cyberattack on the French national blood service further reveals the vulnerabilities arising from inadequate biosecurity and biosafety protection for biological infrastructure. The Sverdlovsk case, in turn, attests to the damage that a lack of information can do to institutional credibility and international confidence. Taken together, these cases support the development of a centralised biosecurity and biosafety policy that establishes institutional responsibility and mandates reporting on the movement of biological agents, laboratory leaks and infections. Such a policy must also establish accountability within global governance structures to ensure international coordination, public safety and public trust.
Policy Implications
Although India does not currently have such a central policy, the Department of Biotechnology (DBT) governs most biosafety and biosecurity areas. The DBT and other government bodies should therefore consider the following for any such central policy:
- Institutional coordination:
Governments should strengthen institutional coordination across law enforcement, public health and scientific research systems. Biological threats cannot be managed effectively when relevant information remains confined within individual agencies.
An enforced framework should incorporate clear accountability arrangements, independent safety assessments and appropriate occupational health protections in biosafety laboratories, private pathology laboratories and any other facility that may host biological materials. Specialist research institutions must be subject to credible governance standards, regardless of whether their activities are civilian, military or public health-related.
- Reporting mechanisms and transparency:
Transparency mechanisms should be strengthened through timely reporting, reliable scientific documentation and cooperation with international institutions. In crises that may attract global attention, such as the Irkutsk case, external audits should be prioritised and permitted to counter misinformation and ensure public trust.
- Cyberbiosecurity and cyberbio resilience:
Cybersecurity and public communication cannot be treated as separate regulatory requirements and need to be integrated into institutional preparedness.
Ultimately, the Cleveland, Irkutsk and Sverdlovsk cases illustrate different dimensions of the relationship between biological threats and governance. Together, these cases highlight how biological risks test institutional capacities to coordinate, disclose information and ensure accountability. As such threats can transcend domestic and international boundaries, and effective governance requires more than institutional goodwill or voluntary transparency. It must be supported by clear regulatory obligations, coordinated oversight and mechanisms to ensure accountability.
Shravishtha Ajaykumar is an Associate Fellow with the Centre for Security, Strategy, and Technology at the Observer Research Foundation.
The views expressed above belong to the author(s). ORF research and analyses now available on Telegram! Click here to access our curated content — blogs, longforms and interviews.