Bundeswehr raises Russian sabotage threat to second-highest level for the first time
Germany's armed forces (Bundeswehr) have for the first time classified the threat of Russian sabotage against their troops as "significant" — the second-highest level on the threat scale. The reassessment follows a series of drone incidents in Germany, including a failed attack at Leipzig/Halle airport and the discovery of a similar drone near a Bundeswehr air base in Wunstorf, both attributed by the German government to Russia. Internal Bundeswehr documents warn of an imminent threat of Russian hybrid attacks using combat drones and say Moscow has crossed a previously expected "red line" of intent to cause physical and potentially lethal harm.
Key points
- Bundeswehr classified the Russian sabotage threat as "significant" — the second-highest level on its scale — for the first time ever.
- Internal documents warn of an imminent Russian hybrid-attack threat involving combat drones.
- The reassessment followed a failed drone attack at Leipzig/Halle airport in early August and the mid-September discovery of a similar drone near the Bundeswehr air base in Wunstorf.
- The German government has placed responsibility for both incidents on Russia.
- Bundeswehr documents assess that Russia has crossed a previously expected "red line" of intent to inflict physical or lethal harm on Germany.
- The Bundeswehr is preemptively strengthening security at its facilities; 165 suspected sabotage cases and 747 suspicious-drone incidents have been logged in Germany since the start of 2026.
- Chancellor Friedrich Merz said Germany is preparing for large-scale hybrid attacks and will respond "quickly and very clearly."
Why it matters
The reassessment is the first time the Bundeswehr has placed the Russian sabotage threat at its second-highest level, marking a qualitative shift in Germany's perception of the threat. Internal documents assess that Russia has crossed a previously expected "red line" of intent to inflict physical and potentially lethal harm on Germany and the Bundeswehr, and Germany's strategic assessment ties Russian sabotage activity directly to efforts to weaken German political and public support for Ukraine and to disrupt military aid and training of Ukrainian service members. German intelligence forecasts further deterioration in the short term, prompting preemptive security upgrades at Bundeswehr facilities.
What happened
Germany's armed forces (Bundeswehr) have for the first time classified the threat of Russian sabotage against their troops as "significant," the second-highest level on the threat scale. The reassessment is grounded in two drone incidents under investigation by German law enforcement.
In early August, a drone equipped with explosives carried out a failed attack at Leipzig/Halle airport. CCTV footage showed the drone striking the wing of a Ukrainian An-124 cargo plane before falling to the ground without detonating. The Ukrainian Foreign Ministry reported no casualties and no damage to Ukrainian-operated planes. The Leipzig airport is an important logistics hub for transporting Western aid to Ukraine, and media reports said the targeted An-124 had onboard ammunition recently delivered from France bound for onward transport. German law enforcement identified suspects in the case, including a Belarusian citizen and a Russian citizen reportedly linked to Russian military intelligence (GRU).
In mid-September, a drone of similar design — likely also equipped with explosives — was discovered near the Bundeswehr air base at Wunstorf in Lower Saxony. Investigators assess the device may have lain near the base for around two years before being found, and that it was likely intended for use against Bundeswehr aircraft. Investigators also believe the Leipzig drone most likely targeted Ukrainian cargo planes.
According to the German government, responsibility for the drone incidents lies with Russia. Internal Bundeswehr documents assess that Russia probably has the capability and very likely an intensified intention to act against Bundeswehr forces and facilities, as well as against partners including Ukraine, on German territory, and that the strategic goal of Russian sabotage is likely to weaken Germany's political and public support for Ukraine. At the operational level, Russian sabotage may aim to disrupt military-equipment supplies and the training of Ukrainian service members.
Since the beginning of 2026, German law enforcement registered 165 cases of suspected sabotage and 747 incidents involving suspicious drones over military facilities and critical infrastructure; German security agencies suspect Russian involvement in many of them. A Bundeswehr Operational Command spokesman confirmed that the armed forces are strengthening security measures and stepping up protection of their facilities in response to the heightened threat. German intelligence forecasts worsening of the situation in the short term, with further actions expected soon.
How Ukrainian sources describe it
All four Ukrainian-source articles in the synthesis converge on a single core development: the Bundeswehr's first-ever classification of the Russian sabotage threat as "significant," the second-highest level on the threat scale. The Ukrainian coverage frames the reassessment as a direct consequence of recent drone incidents in Germany and foregrounds the Bundeswehr's internal warnings of an imminent Russian hybrid-attack threat. The pieces center the German armed forces and the German government as the principal actors responding, and they highlight the Bundeswehr's decision to step up protection of its facilities.
Background
In early August, an attack using a drone equipped with explosives failed at Leipzig/Halle airport; CCTV showed the drone striking a Ukrainian An-124 cargo plane on the wing before falling to the ground without detonating, and the Ukrainian Foreign Ministry reported no casualties and no damage to Ukrainian-operated planes. According to German media, the targeted An-124 carried ammunition recently delivered from France bound for onward transport, and German law enforcement has identified suspects, including a Russian citizen reportedly linked to Russian military intelligence (GRU).
Shortly after the Leipzig incident, another drone of similar design — likely also equipped with explosives — was discovered near Wunstorf, close to an important Bundeswehr air base; investigators assess it may have lain there for around two years, and it appears to have been intended for use against Bundeswehr aircraft.
Since the start of 2026, German law enforcement has registered 165 cases of suspected sabotage and 747 incidents involving suspicious drones over military facilities and critical infrastructure; German security agencies suspect Russian involvement in many of them.