Germany attributes Leipzig airport drone attack to Russia and announces new defense plan

Averted detonation at Leipzig/Halle Airport

German Chancellor Friedrich Merz spoke publicly on 5 September 2026 regarding a failed explosive drone attack discovered on 4 August 2026 at Leipzig/Halle Airport. Addressing a Christian Democratic Union (CDU) event in Langenhagen near Hannover, Merz stated that the drone was located in close proximity to two partially refueled Ukrainian transport aircraft. The chancellor noted that the explosives failed to detonate only by chance, preventing what he described as a potential inferno on the tarmac. German authorities conducted an investigation lasting four weeks before finalizing their conclusions regarding the origin of the device.

Merz stated that the investigation produced legally resilient evidence linking the operation directly to Moscow.

Everyone who attacks us must know: we are firmly determined to defend our rule of law, our democracy, our open society, and also the integrity of our territory.

Diplomatic response and Moscow's denial

Following the conclusion of the four-week inquiry, the federal government officially attributed the attempted sabotage to Russia and enacted retaliatory measures. Berlin announced the closure of the Russian Consulate General in Bonn alongside the Russian House cultural institution in Berlin, while also preparing additional sanctions. Russian officials rejected all accusations of involvement, stating that the German government has not produced public evidence to support the claims. Merz rejected calls from domestic critics to halt military and financial assistance to Kyiv, characterizing the broader conflict following the 2022 invasion of Ukraine as a fundamental rupture in European security relations.

National defense plan and rapid-deployment units

In response to the Leipzig incident, Federal Minister of the Interior Alexander Dobrindt announced a defensive strategy to counter ongoing sabotage operations. Speaking to Bild am Sonntag, Dobrindt detailed plans for a digital sensor network named Cyberdome, designed to detect and neutralize unauthorized intrusions into national networks. The security framework also establishes rapid-deployment drone defense units stationed across nine German cities: Berlin, Cologne, Düsseldorf, Frankfurt am Main, Hamburg, Hannover, Leipzig, Munich, and Stuttgart. These specialized units will operate with the capability to intercept unmanned aerial vehicles and defuse explosive payloads.

The interior minister emphasized that defensive responsibilities will expand beyond the Federal Police to include critical infrastructure operators.

Russia's hybrid attacks with explosive drones on airports, agents in our cities, cyberattacks on our networks and sabotage of our infrastructure are a daily reality. These attacks will increase, but we can fight back and protect ourselves.

Regulatory changes for critical infrastructure

Under the proposed regulations, operators of critical installations such as water utilities, electricity providers, and defense manufacturing plants will receive legal authorization to actively intercept and repel hostile drones rather than solely detecting them. The expanded security measures coincide with reports of other security incidents across Germany, including a large-scale data breach in Berlin on 5 September 2026 and explosive devices discovered attached to electricity pylons in eastern Saxony, though authorities have not formally linked those events to foreign state actors. In his Langenhagen address, Merz compared the required resolve to the West German government's position during the 1982–1983 Cold War rearmament debates, arguing that democratic institutions must maintain a consistent defensive posture against territorial and infrastructural threats.