For nearly a month, German officials described it only as an active investigation into a "security incident." That changed on Tuesday, September 1, when Berlin formally pinned a foiled bombing plot at one of Europe's largest freight airports on the Russian state, instantly reordering the country's relationship with Moscow.
Germany Names a Culprit
Standing before reporters in Berlin, Interior Minister Alexander Dobrindt argued that, taken together, police work, forensic patterns and separate intelligence findings left no doubt that Moscow was behind the drone plot uncovered at Leipzig/Halle Airport on August 4. As he put it, "the police investigations, the pattern and intelligence findings prove a Russian responsibility" for the failed attack, a conclusion he said authorities reached only after weeks of forensic work that reached well beyond the airport grounds.
Three Drones in Twelve Days
The plot investigators have reconstructed involved not one device but three. The first, laden with explosives and fitted with a detonator, was found close to a parked Ukrainian Antonov An-124 on the night of August 4; a bomb-disposal robot removed the detonator before it could go off. Hours later, while the runway sat closed, a DHL freighter aborting its own landing collided with a second object in midair; the aircraft suffered only minor damage and diverted safely to Hannover Airport. Ten days later, on August 14, searchers combing a field in the nearby town of Kabelsketal turned up a third drone, and forensic technicians recovered roughly 50 grams of a substance believed to be hexogen, a military-grade explosive also known as RDX.
A Genetic Trail That Leads to Lithuania
Investigators also lifted a genetic trace from the first drone, and German outlets have reported that it matches a profile logged after a 2024 arson attack on a DHL sorting facility at the same airport — a case in which five defendants are now standing trial in Vilnius on charges connected to the GRU, Russia's military intelligence agency. No individual has been identified in connection with the newer trace.
Why a Cargo Airport Became a Target
Leipzig/Halle ranks among Europe's busiest freight hubs and functions as a staging ground for NATO cargo flights. It has also housed Ukraine's Antonov Airlines fleet since 2022, after Russian forces destroyed the carrier's original base at Hostomel, near Kyiv, in the earliest days of the full-scale invasion. That combination — heavy volumes of military cargo bound for Ukraine passing through a single hub — is what investigators believe made the airport an attractive target.
Berlin Raises Its Guard
Weeks earlier, when the first drone turned up, Dobrindt had already framed the discovery as a watershed moment, warning that an explosives-rigged drone at an airport amounted to a "new threat scenario" unlike anything German security services had previously confronted. On Tuesday, that warning turned into action: the national threat-level assessment moved from "general" to "high," and Foreign Minister Johann Wadephul announced that the Russian consulate general in Bonn will shut its doors on September 18, that the lease behind the Russian House, Moscow's cultural and language center in Berlin, has been cancelled, and that entry screening for Russian nationals will tighten. Wadephul added that Germany will press the European Union for additional sanctions and increase monitoring of the so-called shadow fleet of tankers accused of moving sanctioned Russian oil.
Moscow Calls It a Pretext
Russia's government rejected the accusation almost as soon as it was made. Foreign Ministry spokeswoman Maria Zakharova told reporters that closing the Russian House had been a long-standing German goal and that officials had simply seized on a convenient justification, warning that "Moscow will respond to all anti-Russian decisions." Kremlin spokesman Dmitry Peskov separately dismissed the allegation as unsubstantiated, arguing, according to Russian state media, that Berlin had produced no real evidence and was choosing escalation over dialogue; that characterization could not be independently confirmed through Western wire reporting as of publication.
A Broader Pattern, and a Warning From Washington
Germany's move adds to a summer of unexplained sabotage across Europe — arson, undersea cable cuts, GPS jamming, drone sightings near military sites — that Western officials increasingly trace back to Russian hybrid operations. NATO Secretary-General Mark Rutte welcomed Tuesday's measures and said the alliance would keep strengthening its ability to deter hybrid threats like the one uncovered at Leipzig, while European Commission President Ursula von der Leyen promised that EU foreign ministers would unveil a coordinated response, including new sanctions, within days. Separately, U.S. spy agencies have concluded that Moscow may probe NATO's Article 5 guarantee through a contained strike on a member country sometime between this fall and 2029, with the Baltic states or Poland seen as the likeliest targets.
"They Will Pay a Price"
Tuesday's announcement built on a warning Chancellor Friedrich Merz had already issued days after the first drone surfaced. Speaking at a cabinet retreat outside Berlin in late August, Merz said his government would make sure that "they will pay a price for their actions," a pledge tied to a broader push to expand Germany's drone defenses and give security services more latitude to respond to hybrid threats at home and abroad. With formal blame now assigned, that pledge faces its first real test — one likely to play out in Brussels sanctions negotiations as much as in Berlin.
