Germany drafts security plan with drone units, cyber shield and AI surveillance to counter Russian sabotage
Germany's Federal Ministry of the Interior has drafted a comprehensive security plan to protect against sabotage and hybrid attacks linked to Russia, Interior Minister Alexander Dobrindt has confirmed. The plan includes mobile rapid-response units in nine cities, powers for critical-infrastructure operators to intercept drones, expanded AI and facial-recognition surveillance, and a national "cyberdome". It follows the August drone incident at Leipzig/Halle Airport near a Ukrainian An-124 and a sharp rise in suspected sabotage cases since the start of 2026.
Key points
- Germany's Federal Ministry of the Interior drafted a comprehensive plan against sabotage and hybrid attacks, confirmed by Interior Minister Alexander Dobrindt.
- Mobile rapid-deployment units equipped with helicopters and special transport will be set up in Berlin, Munich, Hamburg, Stuttgart, Düsseldorf, Frankfurt am Main, Leipzig, Hanover and Cologne.
- The units will be tasked with protecting airports, railway stations and the government quarter in Berlin, and will be empowered to intercept drones, including explosive-laden ones.
- Operators of critical infrastructure — power plants, water utilities and defence companies — would gain legal authority to detect and actively counter drones themselves.
- Germany is considering a national "cyberdome", a network of digital sensors to detect and block cyberattacks on government institutions and companies.
- AI-based video surveillance and facial-recognition systems are to be expanded, including at railway stations, to search for suspects and detect potentially dangerous behaviour.
- Since the start of 2026, Germany has recorded 165 suspected sabotage cases and 747 incidents involving suspicious drones over military and critical-infrastructure sites.
Why it matters
The plan institutionalises Germany's response to suspected Russian sabotage and drone incursions, treating them as a sustained hybrid threat rather than one-off incidents. It significantly expands domestic security authority by giving mobile units and critical-infrastructure operators — including defence firms — new powers to intercept drones, and extends digital surveillance through AI video monitoring, biometric facial recognition and a national cyber shield. The package is a direct political and operational response to the Leipzig/Halle Airport drone incident, which involved a Ukrainian military-cargo aircraft, and to a sharp rise in recorded sabotage and drone-overflight cases since the beginning of 2026.
What happened
Germany's Federal Ministry of the Interior has drawn up a comprehensive security package to defend against sabotage and hybrid attacks, which Interior Minister Alexander Dobrindt has confirmed. The plan centres on mobile rapid-response police units equipped with helicopters and special transport vehicles, to be stationed in nine cities: Berlin, Munich, Hamburg, Stuttgart, Düsseldorf, Frankfurt am Main, Leipzig, Hanover and Cologne. Their remit is to protect airspace above key transport hubs — airports and railway stations — as well as the government quarter in Berlin, and to be able to intercept drones, including those carrying explosive devices.
Alongside the new units, operators of critical infrastructure such as power plants, water utilities and defence-industry companies would for the first time be given legal authority to detect and actively counter drones on their own sites. Germany also plans to expand AI-based video surveillance and facial recognition — including at railway stations — to search for suspects, weapons and signs of dangerous behaviour, and is weighing a national "cyberdome": a network of digital sensors designed to identify and block cyberattacks on government institutions and companies.
The package is framed as a direct response to the 4 August incident at Leipzig/Halle Airport, where an explosive-carrying drone was found near a Ukrainian An-124 military-cargo aircraft that was transporting ammunition. The device was described as professionally built with military characteristics. On 1 September German authorities officially held Russia responsible for the sabotage, and Berlin announced the closure of the Russian Consulate General in Bonn and the cancellation of plans to build a "Russian House" in Berlin, alongside tighter controls on Russian citizens arriving in Germany. According to Dobrindt, the perpetrators acted on orders from Russian state structures.
Background
The security package was prepared in the wake of the 4 August incident at Leipzig/Halle Airport, in which a drone carrying an improvised explosive device was discovered near a Ukrainian An-124 cargo aircraft. The aircraft was transporting military ammunition, and the device was described as professionally manufactured and having military characteristics. On 1 September the German government publicly attributed the incident to Russia, and Berlin responded by closing the Russian Consulate General in Bonn, scrapping plans for a "Russian House" in the German capital, and tightening controls on Russian citizens entering the country.