Healthy processed event from Hybrid War Tracker
Headline: Hybrid Threat: German BKA Counts Over 320 Suspected Sabotage Cases in 2025
Short Summary: According to a classified BKA report obtained by NDR, WDR, and Süddeutsche Zeitung, Germany experienced 321 suspected sabotage incidents in 2025, with North Rhine-Westphalia and Lower Saxony hardest hit. Notable incidents include a break-in at a substation in Wuppertal on January 7, attempted break-in into a wind turbine near Starnberg on January 8, theft of Deutsche Bahn radio equipment in Oberhausen, and suspicious metal clamps causing a freight train derailment in Essen transporting chemicals and diverted US military cargo. The BKA categorizes threats across various infrastructures such as military facilities, railways, energy plants, police, and water supply systems. There were also 2,310 reported drone overflights, some suspected of reconnaissance, including sightings near Fehmarn above a Russian tanker. Authorities suspect Russian intelligence operations involving non-professional 'throwaway agents' recruited mainly online to conduct espionage and sabotage. German authorities have arrested suspects linked to these activities, including arrests in Hamburg of individuals accused of attempting sabotage on naval vessels, such as damaging systems and contaminating the engine of Corvette “Emden.” To counter these threats, the Federal Interior Ministry will soon establish an anti-hybrid threat center within the BfV to accelerate detection and response. Since the start of Russia’s war of aggression, the frequency of suspected sabotage has increased significantly. While some investigations remain unresolved or dismissed due to lack of evidence, others have resulted in convictions and ongoing probes. Officials note some alarms may be false or caused by non-malicious factors.
Extended Summary: According to a classified BKA report obtained by NDR, WDR, and Süddeutsche Zeitung, Germany experienced 321 suspected sabotage incidents in 2025, with North Rhine-Westphalia and Lower Saxony hardest hit. Notable incidents include a break-in at a substation in Wuppertal on January 7, attempted break-in into a wind turbine near Starnberg on January 8, theft of Deutsche Bahn radio equipment in Oberhausen, and suspicious metal clamps causing a freight train derailment in Essen transporting chemicals and diverted US military cargo. The BKA categorizes threats across various infrastructures such as military facilities, railways, energy plants, police, and water supply systems. There were also 2,310 reported drone overflights, some suspected of reconnaissance, including sightings near Fehmarn above a Russian tanker. Authorities suspect Russian intelligence operations involving non-professional 'throwaway agents' recruited mainly online to conduct espionage and sabotage. German authorities have arrested suspects linked to these activities, including arrests in Hamburg of individuals accused of attempting sabotage on naval vessels, such as damaging systems and contaminating the engine of Corvette “Emden.” To counter these threats, the Federal Interior Ministry will soon establish an anti-hybrid threat center within the BfV to accelerate detection and response. Since the start of Russia’s war of aggression, the frequency of suspected sabotage has increased significantly. While some investigations remain unresolved or dismissed due to lack of evidence, others have resulted in convictions and ongoing probes. Officials note some alarms may be false or caused by non-malicious factors.
In 2025, German security authorities registered 321 suspected sabotage cases nationwide, with the highest numbers in North Rhine-Westphalia (88 cases) and Lower Saxony (51 cases). Suspicious activities include attacks on infrastructure such as railways, energy plants, and military installations. The Bundeskriminalamt (BKA) suspects involvement of Russian intelligence services recruiting 'throwaway agents' online to conduct espionage and sabotage. The Federal Office for the Protection of the Constitution (BfV) plans to create a dedicated hybrid threat defense center to improve response capabilities.
This event involves confirmed hostile sabotage and espionage activity (aggressor event) attributed to Russian intelligence and their agents. Concurrently, German authorities are preparing defenses and response mechanisms by establishing a hybrid threat center within the BfV (defense prep event).
Add a source URL for enrichment
Prefer one-click submissions? Install the HWT Chrome extension from the Web Store. Get extension .