German authorities have launched a nationwide manhunt for a 48-year-old man following five sabotage attacks on high-voltage infrastructure in the first week of September 2026. The incidents, which spanned Brandenburg, North Rhine-Westphalia and Saxony, targeted substations and transmission lines located near active lignite mining operations. Police recovered explosives from the suspect's apartment in Gevelsberg and located his vehicle in a wooded area near Niederzier, but the individual remains missing.
A coordinated week of disruption
The sequence of attacks began on the morning of 2 September in southern Brandenburg. Police report that more than 20 homemade rockets were used to fire conductive material at high-voltage lines at the Turnow-Preilack substation, near the Jänschwalde power plant. Two short circuits were recorded, though the grid operator confirmed no widespread outage occurred. By that evening, a second disturbance was reported at a substation in Bergheim, near Cologne. RWE Power stated that five lignite-fired power plant blocks at the Niederaußem and Neurath sites were disconnected from the grid. While most were restored quickly, one block was expected to remain offline until the following week.
Further devices were discovered on Thursday evening at a substation in Dormagen, between Cologne and Düsseldorf, after a passerby spotted suspicious launch equipment. On Friday, police responded to reports of suspected explosive devices north of Bautzen in Saxony. Twelve devices were found near the Bärwalde and Graustein substations in the Lusatian lignite region. A separate police operation in Hamm targeted a former power plant site that has been out of operation for some time. In all three states involved, lignite is still mined and used for electricity generation, suggesting a deliberate focus on fossil fuel infrastructure.
The investigation and the suspect
Investigative efforts intensified on Friday after authorities traced the suspect to an apartment in Gevelsberg, North Rhine-Westphalia. A search of the premises yielded explosives. Later that afternoon, a special operations unit located a truck, which had been converted into a camper van, in a forest near Niederzier, approximately 100 kilometres away. The vehicle was secured, but the suspect was not inside. Police and prosecutors in Brandenburg and North Rhine-Westphalia issued a joint public appeal with photographs of the 48-year-old, requesting information from the public.
The investigation is being treated as a case of terrorism. Two confession letters sent to various media houses and the German Press Agency provided specific details that investigators believe only the perpetrator would know. Federal Interior Minister Alexander Dobrindt confirmed the authenticity of the claims contained in the correspondence. The letters explicitly state that electricity generation from fossil fuels is a crime, linking the physical attacks to a specific ideological motivation.
Defining the motive as climate terrorism
Federal Interior Minister Alexander Dobrindt described the likely motive as climate terrorism carried out by a lone actor. He emphasised that the technical details in the confession letters matched the physical evidence found at the crime scenes. The classification has raised the stakes for law enforcement, shifting the investigation from simple property damage to a national security threat. Dobrindt noted that the knowledge revealed in the letters is clear perpetrator knowledge, validating the police assessment of the threat level.
State-level politicians have pushed back against the ideological justification. North Rhine-Westphalia Interior Minister Herbert Reul argued that endangering the power supply of hospitals in the name of climate protection does not save anything but rather threatens lives. Reul stated that no ideology serves as an excuse for such actions. The tension highlights the conflict between radical climate activism and the practical necessities of maintaining critical infrastructure during the energy transition.
Grid operators call for transparency changes
The attacks have prompted immediate calls from energy industry leaders to revise security protocols. Christoph Müller, Chief Executive of transmission grid operator Amprion, argued that current regulations force companies to make too much information about grid infrastructure publicly available. He suggested this makes it unnecessarily easy for attackers to identify vulnerable points regardless of their origin. Müller is calling for eased transparency requirements and explicit permission for companies to use drones for regular surveillance of power lines.
Amprion, one of four major transmission system operators in Germany, manages the grid primarily in the west and south-west. Müller also advocated for expanded rights to use cameras to monitor not just company property but the surrounding environment. These requests touch on broader debates about privacy and security. The European Commission has previously outlined standards for critical infrastructure protection, but national implementation varies. The incidents in Germany suggest that current physical security measures may be insufficient for the current threat environment.
People mentioned
-
Herbert Reul
-
Christoph Müller
Organisations
Amprion · RWE Power · German Federal Police
