Germany says Russia was behind attempted Leipzig airport drone attack as Berlin prepares coordinated response
BY SCN NEWS
BERLIN — Germany has directly blamed Russia for an attempted explosive-drone attack at Leipzig/Halle Airport, escalating an incident that Berlin initially described only as suspected foreign sabotage into a confrontation with Moscow over what German officials regard as an increasingly dangerous campaign of hybrid warfare inside Europe. The attribution follows a nearly month-long investigation into an explosives-laden drone discovered close to a Ukrainian cargo aircraft at the airport, an important civilian freight centre that also serves NATO logistics and Ukrainian heavy-lift operations.
The incident began during the night of August 4-5 when an airport employee discovered a drone carrying an explosive device inside the secured cargo area near Leipzig/Halle's southern runway. Saxony's state criminal police and Dresden prosecutors specializing in extremism took over the investigation, describing the airport as critical infrastructure. Bomb-disposal specialists secured the device before it exploded, and the airport temporarily suspended operations.
The location immediately made the incident particularly sensitive. The drone was discovered near a Ukrainian Antonov An-124, one of the enormous heavy-lift cargo aircraft operating from Leipzig and used to transport military and other strategic cargo. Leipzig/Halle is one of Europe's largest freight airports and also supports U.S. and NATO military logistics, meaning a successful attack could have affected not merely German civil aviation but a transport network supporting Ukraine.
Investigators subsequently discovered evidence indicating the incident was larger than a single stray drone. German media reported that another unmanned aircraft may have collided with or approached a DHL cargo plane around the same period, while a third drone was later recovered west of the airport. Investigators examining that later device found material suspected to include roughly 50 grams of the military explosive hexogen, also known as RDX. German authorities have been cautious about publicly releasing forensic details while the criminal investigation remains active.
U.S. intelligence had already pointed toward Moscow before Berlin's formal attribution. An American intelligence official briefed on the investigation told ABC News that the configuration of the explosive device and explosives carried by the drone bore characteristics associated with devices used by Russia's GRU military intelligence service. The assessment was made in cooperation with German security and intelligence agencies, according to the report. Russia's Foreign Intelligence Service rejected allegations of Russian involvement and accused German officials and media of drawing conclusions without sufficient evidence.
German officials initially stopped short of publicly naming Russia despite those suspicions. Interior Minister Alexander Dobrindt called the Leipzig incident a “new level of danger” and a hybrid-attack scenario involving a foreign power, while Chancellor Friedrich Merz said investigators needed to establish an evidentiary case strong enough to withstand public scrutiny. Germany's caution reflected the gravity of formally accusing another state of attempting an explosives attack on critical infrastructure inside NATO territory.
That threshold has now been crossed. Reuters reported Tuesday that two sources confirmed the German government was prepared to attribute the attack to Russia and was considering new sanctions in coordination with allies. German Foreign Minister Johann Wadephul and Dobrindt were preparing to explain Berlin's conclusions and response, while Merz said the government had reached broad agreement internally and was coordinating its next steps with both the European Union and NATO.
The distinction between attribution and military retaliation is important. Germany is treating the Leipzig incident as part of hybrid warfare, a category that can include sabotage, cyberattacks, espionage, disinformation and covert operations conducted below the threshold of conventional armed conflict. NATO said this weekend that Russia was stepping up hybrid activities in Europe but that the alliance currently saw no imminent threat of a conventional attack.
Berlin has not yet publicly detailed its full retaliatory package. Potential measures discussed in Germany include additional sanctions, diplomatic action and tougher measures against Russian networks and the so-called shadow fleet used to move Russian oil around Western sanctions. Whether Germany seeks formal consultations under NATO's Article 4 mechanism has not been established. Any specific measures should therefore be distinguished from proposals being discussed before Berlin announces its final response.
The Leipzig case is particularly significant because Germany has spent years confronting suspected Russian sabotage without always publicly attributing individual incidents directly to the Kremlin. German authorities say the country faces persistent cyberattacks, espionage, infrastructure surveillance and suspected sabotage linked to foreign actors. The use of an explosive-carrying drone at an operational civilian airport, however, raises the potential consequences dramatically because a successful detonation near fuelled aircraft could have caused casualties as well as major disruption.
The incident therefore tests one of NATO's most difficult security questions: how should an alliance built primarily to deter conventional military attack respond when a hostile state is accused of operating deliberately below that threshold? Germany is not describing Leipzig as an act triggering collective military defence, but its decision to coordinate the response with NATO and EU allies indicates Berlin wants the consequences to extend beyond a bilateral diplomatic protest.
For Moscow, Germany's formal attribution adds another point of confrontation with one of Ukraine's most important European supporters. For Berlin, the unanswered question is no longer simply who was behind the Leipzig incident. It is how Germany can impose a meaningful cost for an alleged Russian operation on German soil without allowing a covert attack that failed to explode to become the trigger for uncontrolled escalation between Russia and NATO.