On April 7, 2026, Germany's Federal Office for the Protection of the Constitution (BfV) issued a joint cybersecurity advisory with partners such as the BND and FBI regarding cyber intrusions by the Russian hacker group APT28, attributed to the GRU. The campaign involved infiltration of several thousand globally accessible TP-Link routers, with about 30 vulnerable devices identified in Germany. Since March 13, the BfV, together with state constitutional protection agencies, notified affected operators, confirmed some compromises, recommended technical hardening, and replaced many routers. APT28 is known for high-profile cyberattacks targeting German institutions over recent years. The BfV is conducting forensic analyses of affected routers and remains committed to curbing APT28's cyber activities.

On April 7, 2026, Germany's Federal Office for the Protection of the Constitution (BfV) issued a joint cybersecurity advisory with partners such as the BND and FBI regarding cyber intrusions by the Russian hacker group APT28, attributed to the GRU. The campaign involved infiltration of several thousand globally accessible TP-Link routers, with about 30 vulnerable devices identified in Germany. Since March 13, the BfV, together with state constitutional protection agencies, notified affected operators, confirmed some compromises, recommended technical hardening, and replaced many routers. APT28 is known for high-profile cyberattacks targeting German institutions over recent years. The BfV is conducting forensic analyses of affected routers and remains committed to curbing APT28's cyber activities.