Germany warns of daily hybrid warfare after explosive drone found at Leipzig airport

An explosive-laden drone discovered at Leipzig/Halle Airport on 5 August has pushed the German government to acknowledge what security officials have tracked for months: a sustained campaign of hybrid operations targeting critical infrastructure, military sites and political stability. Interior Minister Alexander Dobrindt told Bild am Sonntag on Sunday that Germany faces daily hybrid warfare from foreign powers seeking to destabilise the country politically and socially.

The Leipzig discovery and immediate aftermath

The device was found during routine security checks at the airport in eastern Germany, a logistics hub that handles both civilian cargo and military shipments. Authorities have not disclosed the type of explosive or the drone's origin, but the discovery triggered an immediate review of airspace security at major transport nodes. The federal police and the Bundeswehr's territorial command are leading the investigation. Dobrindt's ministry has not named a state actor, though several members of the Bundestag's intelligence oversight committee have said privately that the technical signature points toward Russian military intelligence.

The Russian embassy in Berlin issued a statement on 7 August dismissing the incident as a "fabricated provocation" and "another example of unsubstantiated accusations against Moscow." The embassy's language mirrors denials issued after previous drone sightings over German arms factories and rail junctions in 2024 and 2025. NATO's hybrid warfare framework lists unattributed drone incursions as a core tactic for plausible deniability.

Dobrindt's assessment: a constant reality

Speaking to Bild am Sonntag, Dobrindt said: "We're not at war, but we are the daily target of hybrid warfare. Espionage, sabotage, cyberattacks, or covert operations by foreign powers aimed at destabilising Germany or inflicting direct harm are a constant reality." The minister's phrasing marks a shift from the government's previous public posture, which treated each incident as isolated. Intelligence officials briefed the parliamentary control panel in June that the Federal Office for the Protection of the Constitution (BfV) had recorded a 40% increase in suspected foreign state-sponsored sabotage attempts against German infrastructure in the first half of 2026 compared with the same period a year earlier.

Dobrindt did not identify specific countries, but the context is clear. Since Russia's full-scale invasion of Ukraine in February 2022, German authorities have attributed arson attacks on defence contractors, GPS jamming over the Baltic, and cyber intrusions into energy grids to Russian services. The BfV's 2025 annual report, published in June, named the GRU and SVR as the most active foreign intelligence services on German soil.

Expanding the anti-drone shield

According to government sources cited by Bild, the interior ministry plans to double the federal anti-drone specialist force from 150 to 300 personnel and expand the network of dedicated detection and interception bases from four to eight. The new units will be distributed across the federal police's aviation group and the Bundeswehr's territorial command, with a focus on protecting airports, rail hubs, power stations and military installations. Procurement of mobile radio-frequency jammers and kinetic interceptors has been accelerated under an existing framework agreement with Rheinmetall and Hensoldt.

The expansion reflects a capability gap exposed by the Leipzig incident. The airport's existing counter-unmanned aerial systems (C-UAS) detected the drone but could not classify its payload before it landed. A senior federal police officer, speaking on condition of anonymity, said the current sensor suite is optimised for larger fixed-wing platforms and struggles with low, slow, small quadcopters carrying improvised explosives. The new bases will field multi-sensor arrays combining radar, electro-optical and radio-frequency direction-finding.

A cluster of incidents in one week

The Leipzig find was not isolated. On the evening of 6 August, Bundeswehr sentries at the Mechernich training area in North Rhine-Westphalia reported two unidentified drones circling the perimeter for approximately 20 minutes before departing westward. The base hosts a signals intelligence company and a logistics battalion that has processed equipment destined for Ukraine. No payloads were dropped, but the incursion triggered a scramble of Luftwaffe Eurofighter Typhoons from Nörvenich air base under the Quick Reaction Alert (QRA) protocol.

On 8 August, a drone exploded near the Trans-Balkan gas pipeline in southern Bulgaria, roughly 30 kilometres from the Turkish border. Bulgaria's defence ministry said there was no indication of intentional targeting; the pipeline sustained no damage. Ukrainian authorities said they were coordinating with Bulgarian investigators to determine whether the device was a stray Ukrainian drone or a Russian provocation. The Trans-Balkan pipeline carries Russian gas to Turkey and onwards to Europe, though volumes have fallen sharply since 2022.

NATO and EU attribution patterns

NATO and European Union officials have repeatedly attributed similar drone activity to Russia. In January 2026, the North Atlantic Council issued a statement condemning "a pattern of malicious cyber and physical activities" by Russian intelligence services against allied critical infrastructure. The EU's hybrid toolbox, updated in 2025, explicitly lists unattributed drone incursions as a trigger for coordinated diplomatic response. Russia has rejected all such allegations as "anti-Russian hysteria."

The distinction between state-directed operations and freelance actors sympathetic to Moscow remains analytically difficult. German prosecutors in Munich are currently trying two German-Russian dual nationals accused of scouting US military facilities in Bavaria on behalf of the GRU. The trial, which opened in March, has revealed that the suspects used commercial drones to photograph perimeter defences at Grafenwöhr and Hohenfels. That case established a direct operational link between Russian intelligence and drone reconnaissance on German soil.

Domestic political pressure mounts

Opposition parties in the Bundestag have demanded a dedicated hybrid threats coordinator at chancellery level, arguing that the current division of labour between the interior ministry, the defence ministry, the BfV and the military counter-intelligence service (MAD) creates gaps. The FDP's defence spokesman, Marcus Faber, said on Sunday that "the Leipzig drone was not a wake-up call; it was the alarm clock ringing for the third time." The Greens have called for mandatory C-UAS installation at all 16 international airports and at the 30 most critical rail junctions, a measure the transport ministry estimates would cost 1.2 billion euro over five years.

The governing coalition, SPD, Greens and FDP, has so far resisted creating a new bureaucracy, preferring to strengthen the existing Joint Counter-Terrorism and Extremism Centre (GETZ) with a hybrid threats desk. Interior ministry officials say the legal framework for drone defence remains incomplete: the Luftsicherheitsgesetz (Aviation Security Act) authorises the Bundeswehr to shoot down hijacked airliners but does not clearly cover small unmanned systems over civilian infrastructure. A legislative amendment is being drafted for the autumn session.

Why this matters

Background: the evolution of the drone threat

What happens next