Over the preceding decade Zhang’s résumé spanned several high‑profile institutions: she served as an economist at Statistics Canada, as a systems engineer in satellite operations for the Canadian Space Agency, and held posts at the European Space Agency in Italy and at the World Trade Organization in Switzerland.

The Canadian Security and Intelligence Service (CSIS) has taken charge of a multi‑departmental damage‑assessment effort, issuing a statement that “when security incidents of this nature arise, it is customary that departments and agencies conduct a review to identify and address the potential consequences,” and confirming its coordination with federal counterparts.

NATO, for its part, has publicly affirmed that none of its critical command‑and‑control systems were compromised as a result of Zhang’s alleged activities.

Intelligence analysts, citing standard practice, say the assessment will hinge on a forensic reconstruction of Zhang’s physical and logical access: badge‑log entries, security‑camera recordings, and any retained access‑control data will be cross‑checked to map her movements, determine which classified environments she entered, and evaluate whether any data exfiltration could have occurred.

By piecing together this evidentiary mosaic, agencies aim to delineate the scope of any breach, identify possible accomplices, and implement remedial safeguards to forestall future insider threats.