German intelligence vice president Dag Baehr used data-leaked phone number for years

Origins of the auction house breach

The private mobile phone number, personal email addresses, and residential address in Upper Bavaria belonging to Dag Baehr remained publicly accessible on the internet for several years. The exposed records originated from a 2020 cyberattack against a US online auction platform specializing in art, antiques, and collectibles. Following that intrusion, cybercriminals published the personal data of more than 3.4 million customers on the internet. At the time of the data leak, Baehr served as the deputy commander of the Bundeswehr Strategic Reconnaissance Command (Kommando Strategische Aufklärung). Although the auction house notified its users by email about the stolen credentials shortly after the incident, the information remained accessible across the internet.

Operational responsibilities at the BND

In 2023, Baehr assumed the role of military vice president of the Federal Intelligence Service (BND), placing him among the highest-ranking security officials in Germany. Holding the rank of Generalmajor in the Bundeswehr, where he is known by the nickname "Eisbär", Baehr oversees foreign strategic military intelligence operations. His department is responsible for tracking developments concerning Russian nuclear arsenals, North Korean ballistic missile programs, and Chinese space weapons systems. Despite managing operations that fall under strict secrecy regulations, Baehr continued to operate the compromised mobile telephone number. Investigative reporters from WDR and Süddeutsche Zeitung established direct contact with him by dialing the leaked number on 9 September 2026.

Official reachability and device usage

Baehr stated that he maintained the phone number primarily for family reasons, limiting its use to private acquaintances who struggled to memorize a new telephone number. He also noted that the mobile device was subjected to regular software scans to detect potential malicious code. However, several active military personnel and government officials reported that they used that exact number as their sole mobile contact for Baehr, despite maintaining no private relationship with him. The WhatsApp profile associated with the number displayed a polar bear image matching his military callsign. Baehr acknowledged that continuing to use the exposed line was a mistake and confirmed that he had recently corrected the situation.

Surveillance vulnerabilities and response

Security analysts stated that exposed personal information allows hostile foreign agencies to locate devices, monitor communications, and launch targeted phishing campaigns. Intelligence specialist Christopher Nehring explained the scope of threat vectors created by exposed personal data in comments to Süddeutsche Zeitung.

With such data, an attacker can do a whole lot.

Nehring noted that hostile operatives can use contact lists to construct behavioral profiles involving personal habits and locations, or to approach individuals within a subject's professional circle. Russian intelligence services have increasingly deployed messaging platforms like WhatsApp and Signal to conduct surveillance against sensitive targets, leading to recent warnings across NATO member states. When asked about the reporting, the BND declined to comment on the incident. A spokesperson for the Federal Chancellery stated that the government takes leaks affecting security agency personnel seriously and conducts risk assessments, but maintains a strict policy against commenting on individual personnel matters.