Lioness Season 3 has turned Joe McNamara’s latest mission into something far more dangerous than another covert operation. After a security breach leaves Joe’s tracker removed and her captors able to disappear without a trace, the team realizes that someone with access to classified information may be feeding details to the enemy.
With Episode 3, “The Bear Is Infected,” arriving on August 16, the question is no longer just who Joe is hunting. It is whether the person she is hunting has been standing beside her all along.
Several clues have already started narrowing the possibilities. The mysterious “Donetsk connection from six months earlier” and the enemy’s apparent knowledge of highly classified tactical procedures suggest that the leak comes from someone with access to sensitive information. Paramount+ has not officially revealed the infiltrator, so the suspects remain theories based on what Season 3 has shown and teased so far.
5. Cruz Manuelos
Cruz is one of the least convincing suspects, but her history makes her impossible to completely rule out. The former Lioness operative is being pulled back into the investigation, placing her close to the new mystery despite everything she went through during her original deployment.
The theory here is not that Cruz deliberately betrayed Joe. If she is connected to the breach, it could be through an accidental leak or something that happened while she was trying to stay away from the intelligence world. The “Donetsk connection” from six months earlier could potentially connect to something Cruz encountered during that period.
Her biggest argument for innocence comes from her character arc. Cruz has already experienced the psychological cost of being used as an intelligence asset, and turning her into an intentional traitor would undermine much of what made her story compelling. A mistake or unintended connection would be more believable than Cruz suddenly deciding to work against Joe.
4. Kaitlyn Meade Or Byron Westfield
Kaitlyn and Byron represent a completely different possibility. Instead of an operative secretly betraying Joe, the breach could have been part of a larger Washington operation that Joe was never told about.
Both characters understand how intelligence operations work at the highest level, and either could potentially have access to the information required to compromise Joe’s mission. The precision of the attack is particularly interesting. Whoever targeted Joe knew enough about the operation to remove her tracker and disappear before the team could respond.
That level of planning could point toward someone operating with considerable intelligence resources rather than a rogue field agent.
Still, there is a major reason to doubt this theory. Joe remains one of their most valuable assets, and deliberately compromising her would create enormous risks for both Kaitlyn and Westfield. They may be willing to make ruthless decisions, but sacrificing Joe without a larger strategic reason would make little sense.
3. Kyle
Kyle is more complicated because his history makes him capable of creating exactly the kind of security problem Joe is now facing.
He has a reputation for operating outside conventional boundaries and working with contacts who are not always thoroughly vetted. That makes him vulnerable to being manipulated, monitored, or compromised by another intelligence service. A sophisticated enemy might not even need Kyle to consciously betray Joe. Intercepted communications, compromised contacts or an off-book operation could provide enough information to expose the Lioness team.
His loyalty to Joe also makes an intentional betrayal difficult to imagine. Kyle has repeatedly demonstrated that he is willing to put himself in danger alongside his people, particularly when things turn violent.
If he is connected to the leak, negligence is a more convincing explanation than deliberate treachery. That would still make him responsible for the breach without turning him into an outright villain.
2. A Member Of Joe’s QRF
This is where the mystery becomes much more personal.
The possibility of someone from Joe’s quick reaction force being compromised fits the evidence surrounding the attack particularly well. Whoever targeted Joe appeared to understand the team’s procedures and knew exactly how to exploit the operation. That kind of knowledge would be difficult to obtain without someone having direct access to the team’s tactics.
A QRF member would also know how Joe’s team communicates, how its missions are structured and how the operatives respond when something goes wrong. If one of them had been passing information to the enemy, the attackers would not need to guess how Joe’s team would react.
The emotional consequences would be enormous. Joe’s tactical team has spent years trusting one another with their lives. Discovering that someone inside that circle was responsible for the breach would hit much harder than exposing an outside enemy.
There is also a reason to remain cautious about this theory. Lioness has built much of its identity around the loyalty between its operatives, and destroying that trust would fundamentally change Joe’s relationship with the team.
1. A New Season 3 Operative Or Asset
The strongest theory may be the simplest one: the infiltrator is someone new.
Episode 3’s title, “The Bear Is Infected,” immediately suggests that something has entered the team and contaminated it from within. If Season 3 introduces a new operative or asset who appears trustworthy before gradually becoming suspicious, the title would take on a much more literal meaning.
A new character connected to the “Donetsk connection” would also explain why the leak seems so difficult to trace. Rather than rewriting the history of an established character like Cruz or Kyle, the series could introduce someone with a hidden allegiance and reveal that they have been manipulating the operation from the beginning.
That would give Joe a betrayal she cannot easily anticipate. She knows the people who have worked beside her for years, but a new operative could arrive with a carefully constructed identity and access to exactly the information an enemy needs.
Until the series confirms the identity of the infiltrator, all five possibilities remain speculation. The evidence currently points most strongly toward someone with direct access to Joe’s operation, which makes a new operative or a member of the QRF particularly interesting. The answer could also completely change how viewers understand the events that led to Joe’s tracker being removed and the enemy’s escape.