security Bearish 6

ODNI Purge: Hundreds of Firings Threaten Cyber Threat Intelligence

· 3 min read · Verified by 3 sources ·
Share

Key Takeaways

  • The mass dismissal of ODNI staff, likely including personnel from the National Counterintelligence and Security Center, could degrade the U.S.
  • government’s ability to track foreign cyber threats and share crucial threat intelligence with the private sector.
  • The purge raises fears of a brain drain in counter-cyber espionage at a critical time.

Mentioned

Office of the Director of National Intelligence (ODNI) government agency Bill Pulte person Tulsi Gabbard person National Counterterrorism Center (NCTC) government agency National Counterintelligence and Security Center (NCSC) government agency Mark Warner person Jim Himes person

Key Intelligence

Key Facts

  1. 1Acting DNI Bill Pulte began mass firings at the Office of the Director of National Intelligence on Monday, June 22, 2026, targeting hundreds of jobs.
  2. 2Political appointees close to former DNI Tulsi Gabbard were among the first terminated, with some walked out of the building by Tuesday, June 23.
  3. 3The National Counterterrorism Center (NCTC), initially expected to be hit hard, had not been impacted as of Tuesday, contrary to earlier expectations.
  4. 4All ODNI offices were ordered to submit ranked lists of their personnel by June 22, a directive linked to Pulte’s mass-firing plans.
  5. 5Sen. Mark Warner and Rep. Jim Himes sent a letter on June 22 warning that large cuts risk undermining intelligence coordination and integration.
Planned ODNI Job Cuts
Hundreds Imminent

Acting DNI Pulte aims to purge what he calls the 'deep state' from the intelligence agency that coordinates cyber and counterintelligence efforts

Analysis

Bull Case
  • Could remove long-standing bureaucratic bloat and speed decision-making on cyber threats
  • May realign ODNI’s focus to emerging threats preferred by the current administration
Bear Case
  • Loss of seasoned cyber analysts will impair detection of advanced persistent threats
  • Disruption of NCSC coordination weakens the government-wide response to major hacks
  • Political loyalty criteria replace technical expertise, potentially missing subtler cyber espionage campaigns

Analysis

The National Counterintelligence and Security Center (NCSC) serves as the hub for integrating cyber threat intelligence across the 18 agencies of the intelligence community, from NSA to FBI to CISA. With acting DNI Bill Pulte ordering all ODNI offices to rank their personnel and initiating firings, the NCSC—whose mission directly counters state-sponsored cyber espionage—faces potential decimation. For CISOs and cybersecurity teams, a less capable NCSC means slower dissemination of indicators of compromise and less effective government-wide response to major incidents, elevating the risk to every sector.

What to Watch

Acting Director of National Intelligence Bill Pulte initiated a sweeping purge of the Office of the Director of National Intelligence (ODNI) on Monday, June 22, 2026, just days after taking over from Tulsi Gabbard. Multiple sources confirmed to CNN that the long-signaled cuts—potentially involving hundreds of employees—began with the immediate termination of political appointees deemed close to the former director. The move, described by an unnamed source as “the deep state firings have begun,” represents one of the most aggressive workforce reductions in the intelligence community since the ODNI was established in 2004. It comes after Pulte, a Trump loyalist, arrived a day early the prior week and demanded a complete employee list, startling Gabbard’s outgoing team. The ODNI was created in response to 9/11 to coordinate the 18 agencies of the intelligence community and prevent intelligence failures. An abrupt mass culling of its ranks raises existential questions about its future cohesion and capability. While the National Counterterrorism Center (NCTC)—initially expected to be a primary target—was spared as of Tuesday, the National Counterintelligence and Security Center (NCSC) and other offices had been asked to rank their personnel by Monday, an order two sources tied directly to Pulte’s mandate. The firings triggered an immediate rebuke from the top Democrats on the Senate and House Intelligence Committees, who warned in a letter delivered Monday that large-scale cuts risk “weakening the coordination and integration of intelligence at a time of unprecedented global threats.” The bipartisan nature of the intelligence oversight structure makes this intervention notable, hinting at deeper concerns about the politicization of the intelligence community’s human capital. The targeting of Gabbard allies suggests the layoffs are not merely about headcount reduction or efficiency, but about reshaping the ideological alignment of the intelligence leadership. This could further erode expertise in critical areas like threat analysis, cyber security, and counterintelligence—domains where institutional memory and long-tenured analysts are irreplaceable. The ranking of personnel by each office also signals a shift toward a subjective, performance-and-loyalty evaluation system that may bypass established civil-service protections. For the broader intelligence community, the firings are likely to accelerate attrition and discourage recruitment, hollowing out the non-political workforce that provides continuity across administrations. With an acting director wielding this authority, the speed and scale of the cuts sidestep normal confirmation and oversight processes, embedding a model of rapid, loyalty-based workforce management that could become a template for other agencies. The coming weeks will reveal whether the promised hundreds of firings materialize, but the damage to morale and operational readiness is already unfolding. As one source noted, some appointees were physically escorted from the building by Tuesday, a symbolic punctuation mark on the end of the Gabbard era and the ascendance of a more ideological, Trump-aligned intelligence leadership.

Sources

Sources

Based on 3 source articles

Cite This Page

"ODNI Purge: Hundreds of Firings Threaten Cyber Threat Intelligence." Cyber Intelligence Brief, July 12, 2026. https://getcyberbrief.com/story/odni-firings-cyber-intel-risk

How we covered this story

Every story in our cybersecurity coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.

Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the cybersecurity space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.