Germany links Munich arson near defense firms to Russian military intelligence
German investigators have connected an arson attack on a Munich construction site adjacent to defense companies Rohde & Schwarz and Helsing to Russian military intelligence (GRU). Two Bulgarian citizens have been detained as suspected low-level recruits. The attack is part of a broader pattern of Russian sabotage operations across Europe targeting military logistics and defense industry sites linked to Ukraine.
Key points
- On the night of September 3, two incendiary devices were thrown onto a Munich construction site next to the headquarters of Rohde & Schwarz and Helsing.
- Helsing manufactures drones and supplies them to the Ukrainian military.
- A man and a woman, both Bulgarian citizens, were detained as low-level agents recruited for the attack.
- Frankfurter Allgemeine Zeitung reported that the detainees were part of a GRU group operating from Slovakia.
- German investigators believe the same GRU unit is behind both the Munich arson and the August drone attack on Leipzig/Halle Airport, which Germany officially attributed to Russia on September 1.
- On September 2, Germany closed the Russian consulate general in Bonn in response to the incidents.
- Since the start of 2026, Germany's Federal Criminal Police Office has registered more than 165 suspected sabotage cases and hundreds of suspicious drone incidents near military and critical infrastructure sites.
Why it matters
The Munich arson targeted a site next to companies that supply defense technology to Ukraine, making it part of a Russian sabotage campaign aimed at the military supply chain to Kyiv. Germany's formal attribution to Russia and the closure of a Russian consulate mark a significant diplomatic escalation. The incident also illustrates how the GRU is expanding covert operations across Europe, recruiting low-level agents for specific tasks while planning and coordination remain with Russian intelligence officers.
What happened
In the night of September 3, two incendiary devices were thrown from a moving vehicle onto a construction site in eastern Munich located near the headquarters of defense companies Rohde & Schwarz and Helsing. The resulting fire was quickly extinguished, and the second device was neutralized. Police detained a man and a woman, both Bulgarian citizens, as suspected low-level recruits. German investigators linked the attack to Russian military intelligence (GRU), with Frankfurter Allgemeine Zeitung reporting that the suspects were part of a GRU group operating from Slovakia. The same unit is believed to be behind an August drone attack on Leipzig/Halle Airport, which targeted a Ukrainian An-124 cargo aircraft and which Germany officially attributed to Russia on September 1. In response to the incidents, Germany closed the Russian consulate general in Bonn on September 2.
How Ukrainian sources describe it
Ukrainian media frame the Munich arson as a Russian intelligence operation against defense industry targets linked to Ukraine, emphasizing that Helsing supplies drones to the Ukrainian armed forces. Coverage highlights the attack as part of a broader Russian campaign to disrupt military aid to Kyiv.
Background
According to FAZ, a separate GRU group operating from Slovakia was tasked with sabotage in both Munich and Slovakia, where a planned arson at a facility of Ukrainian defense company Skyeton near Prešov was prevented. The GRU is reported to increasingly recruit non-professional agents via messengers for individual tasks, while planning and coordination remain with Russian intelligence officers. A BKA report cited by Süddeutsche Zeitung recorded more than 165 suspected sabotage cases in Germany since the start of 2026, alongside hundreds of suspicious drone incidents near military and critical infrastructure sites. German investigators also link these incidents to the August drone attack on Leipzig/Halle Airport, which targeted an area near a Ukrainian An-124 cargo aircraft collecting ammunition for Ukraine across Europe.