Full Breakdown
Germany Raises Russian Sabotage Threat to “Significant”
By Drooid · · How we work
Background & Context
Germany has warned that Russia is using “hybrid” tactics—sabotage, cyber-attacks and drones—to undermine European security. Analysts note the term lacks a precise definition, leading to counts that vary from 52 to 255 incidents in Europe since February 2022, depending on whether only physical sabotage or also propaganda-related activities are included.
Recent Incidents Prompting Reassessment
In mid-September investigators found a crashed drone near the Wunstorf air base in Lower Saxony containing a tin of high-explosive material. Technical analysis suggested the device had been placed at the site for about two years, indicating pre-placement before the current escalation. The drone’s design resembled the explosive-laden drone used in an August attempt on Leipzig/Halle Airport, which targeted a Ukrainian cargo aircraft. The Wunstorf case is assessed as a direct attempt against Bundeswehr aircraft and personnel.
The Bundeswehr assessment also cited suspected Russian reconnaissance, including drone overflights of the Arrow 3 missile-defence site in Saxony-Anhalt, surveillance of Patriot maintenance facilities, and a camouflaged camera discovered at a railway station in Minden, Westphalia.
Official Statements & Responses
A defence ministry spokesperson confirmed that the Bundeswehr now classifies the Russian sabotage threat as “significant,” the second-highest level on its internal scale, and said preventive measures will be tailored to each site.
Interior Minister Alexander Dobrindt, speaking on September 1, attributed the Leipzig attack to “low-level agents” acting on Moscow’s behalf and linked the sabotage campaign to efforts aimed at weakening German public support for Ukraine.
Chancellor Friedrich Merz, on October 21, warned that disinformation and hybrid attacks constitute the biggest threat to German society.
The Russian government has denied involvement, with Moscow’s ambassador dismissing the Leipzig allegations as “absurd” and labeling the accusations as provocations.
Criticism & Opposition
Security analysts caution that evidence linking Russia to many alleged sabotage cases remains weak. Several high-profile incidents—such as alleged GPS jamming of EU officials’ aircraft and damage to Baltic cables—were later explained by non-Russian causes or technical failures.
Experts argue that the broad use of “hybrid warfare” may help governments justify increased defence spending and expanded intelligence powers. A report from the Latvian Institute of International Affairs suggested the label is driven by a need to bolster defence budgets and maintain NATO cohesion.
Conflicting Reports & Gaps
Datasets differ sharply on the total number of hybrid attacks attributed to Russia in Europe, ranging from 52 to 255 since early 2022. The discrepancy stems from divergent definitions of what constitutes a hybrid act, with some sources counting only physical sabotage and others including propaganda-related activities. Public evidence for many specific attributions, such as the Leipzig drone incident, has not been disclosed, leaving a gap between official claims and verifiable proof.
What’s Next
Germany is moving to strengthen its air-security framework. Interior Minister Dobrindt has advanced legislative changes that would allow the Bundeswehr to counter drones under defined conditions and clarify the division of authority between police and armed forces. The Bundestag approved the measures in February 2026, and the Bundesrat confirmed them in March. Intelligence services expect the sabotage threat to intensify in the short term, prompting continued enhancements to site security and surveillance across the country.