Cyberattack on Quantum Systems leads Bundeswehr to ground its drones

Malware hidden in a mission planning update

Spiegel reported that intruders planted a malicious program on an internal update server of Quantum Systems, the drone maker based in Gilching near Munich. The code was disguised as a legitimate update for Qbase, the company's mission planning software. Qbase plans flights for the Vector reconnaissance drone, which Ukraine has used for years and which the Bundeswehr procured under the name "Falke". According to Spiegel, the tampered update was also pushed out to servers of the Bundeswehr and other customers, where it was spotted during checks. The company said its own review uncovered an active attack by hostile actors, and that the threat had been brought under control together with the authorities.

Bundeswehr grounds the fleet

The Financial Times reported on 12 November that the German military grounded Quantum Systems drones as a precaution after the incident, citing two people familiar with the matter. Spiegel said the armed forces first kept the company's entire product fleet on the ground to avoid any risk. According to the FT, the grounding also kept Quantum Systems from taking part in a recent exercise with the military. The German defence ministry declined to say anything about the operation or readiness of its weapon systems, citing security reasons, and the armed forces did not respond to a request for comment.

What the company says

Quantum Systems confirmed that it had identified a cybersecurity incident at the end of October 2026. Its statement described the intrusion as an active cyber attack by hostile actors, and it said the threat had been contained by its IT and security teams. The firm has reported the incident to the relevant authorities, and the matter is still under investigation. A company spokesperson told Spiegel that first analyses had produced that finding.

“Through the quick measures taken and the characteristics of the incident, there is no risk in operating Quantum Systems' unmanned systems for the end users and the operators.”

The company would not comment on the operations of individual customers and did not say who it suspected of being behind the attack. In a further statement it said its fleet was ready for use.

“Our fleet is operational.”

Security agencies and the wider threat

Spiegel reported that the Military Counterintelligence Service (MAD), the Federal Office for the Protection of the Constitution and the Federal Office for Information Security are now involved in the case. The FT described the incident as a rare public example of a successful attack on the defence sector, which usually keeps such breaches out of view. The FT also reported that Quantum Systems was valued at €7bn in a funding round this year, and that it holds contracts with the militaries of Germany, Spain and the Netherlands. Spiegel noted that the company runs its own production sites in Ukraine and has entered joint ventures with Ukrainian manufacturers. Germany's domestic intelligence agency had already warned in July of a heightened risk to the defence industry, especially to firms that support Ukraine. Quantum-branded drones are used by Ukrainian forces in the war against Russia.