The first moment that truly tore through the illusion of safety came on August 4, 2026, at Leipzig/Halle Airport in eastern Germany. A drone carrying explosives slipped into the airfield and came to rest near a Ukrainian Antonov-124 aircraft that was loaded with ammunition from France. It failed to detonate, and authorities found it on the ground. The next day, as the airport was still dealing with the disruption, another drone struck a plane mid-flight, forcing an emergency landing in Hannover. Days later, more suspicious drones appeared over a German military base, and a third drone with traces of explosives was found. It was only after weeks of forensic work and intelligence sharing that the German government made a stunning announcement: these were not the work of a lone fanatic or a criminal group. They were sent by Russia. Chancellor Friedrich Merz put it plainly: the attack had been planned in Russia for months, was specifically targeted at Germany, and only by pure chance had it avoided killing people. Saxony’s Interior Minister Armin Schuster used an even sharper phrase: “state terrorism.” European Commission President Ursula von der Leyen joined in, vowing that Europe and NATO would not merely maintain pressure on Russia but increase it. What made the moment so chilling was not just the attack itself, but the quiet recognition across Germany that this kind of event, unthinkable before 2022, had somehow become almost normal.
Yet the Leipzig attack was not an isolated incident. It was part of a broader, escalating pattern. Throughout late 2025 and into 2026, mysterious drones had been appearing in the skies above sensitive German sites: a naval communications facility in Ramsloh, a naval yard in Kiel, the Arrow 3 missile-defense installation at Annaburger Heide, and later the Munich plant of KNDS, the maker of Leopard 2 tanks. In August 2026, six drones flew over a Patriot missile maintenance facility in Mechernich. Some of these incidents were strongly suspected to be Russian, but proof was always elusive. The Leipzig attack changed that. Ukrainian military aid, a fuel-laden cargo plane, an airport in western Europe—these were not reconnaissance targets. This was an attempted act of violence. German authorities also pointed to Russia’s so-called Shadow Fleet, cargo ships that can launch drones from sea and destroy evidence before inspectors arrive. Similar Russian drones had already hit NATO territory elsewhere: Poland, Moldova, Romania. In May 2026, a Russian drone crashed into an apartment building in the Romanian city of Galati, wounding two people. Over the past few years, the Bundeswehr has recorded hundreds of mysterious drone sightings in Germany alone. The pattern is not one of occasional spillover; it is a deliberate campaign of intrusion, surveillance, and intimidation, with Leipzig as its most dangerous confirmed escalation.
To understand how Russia got to this point, you have to look back at the long, quiet years before the drones. Germany, more than most European countries, had tried to manage Russia through cooperation. This was the old idea of Wandel durch Handel—change through trade—which dated back to the 1960s and shaped German policy for decades. Even after Russia first invaded Ukraine in 2014, German leaders preferred diplomacy and economic ties, symbolized by the Nord Stream gas pipeline, hoping that engagement would reduce the risk of conflict. That hope collapsed in 2022, when Russia launched its full-scale invasion and Germany was forced to confront the fact that its strategy had failed. But the hybrid war did not begin with tanks. It began with lies. Russian troll farms, the most famous being the Internet Research Agency and the later “Social Design Agency,” spent years spreading disinformation tailored to German audiences. They created deepfakes of politicians, fake news reports with the logos of real media outlets, and fabricated stories designed to inflame divisions. One fake video claimed a German politician had been accused of rape when no such allegation existed. Another network built fake Wikipedia pages and entire clone websites, known as Doppelgängers, that imitated legitimate news sources. The goal was to make Germans distrust their institutions, their politicians, and each other. Russian-backed media specifically targeted the Russian-German minority, a community of more than a million people, with false narratives about migrants, refugees, and the government in Berlin, eroding trust between citizens and the state.
The political dimension of Russia’s hybrid war was just as deliberate. For years, Russian influence in Germany ran through established parties. The so-called Gazprom lobby—a network of politicians and former officials, most prominently former Chancellor Gerhard Schröder—pushed German policy toward deeper energy dependence on Moscow, helping to create the conditions for Russian leverage. When the mainstream parties finally turned away from Russia after 2022, Moscow shifted its support to the political extremes. The far-right Alternative for Germany and the Sahra Wagenknecht Alliance, or BSW, became vocal critics of military aid to Ukraine, advocates for reopening Nord Stream, and supporters of ending sanctions. Some AfD politicians had already been funded through “Voice of Europe,” a Russian propaganda network linked to Viktor Medvedchuk, a close friend of Vladimir Putin. Others walked out of the German parliament when President Volodymyr Zelenskyy addressed it. In 2023, AfD politician Björn Höcke described Russia as a pioneer for a free and sovereign world, and said that if he became chancellor, his first trip would be to Moscow. In the 2026 Saxony-Anhalt elections, AfD received roughly 43.8 percent of the vote and BSW 5.3 percent—combined, nearly half of voters backed parties that call for a return to Russian partnership. Russia’s disinformation networks amplified both parties, using social media and fake news sites to make them look stronger and more reasonable than they were. The result was a political landscape in which the boundaries between genuine grievance and foreign manipulation became almost impossible to see.
All of this—the drones, the disinformation, the political influence—is one continuous operation, not a series of unrelated threats. The escalation from lies to plots to violence was slow, but it was unmistakable. In 2025, German authorities arrested suspects accused of preparing parcel bomb attacks linked to Russia. By 2026, the Federal Criminal Police Office had recorded over 165 acts of sabotage and 740 mysterious drone sightings in a single year. Two Bulgarians were caught attempting to sabotage a defense factory. A power plant in eastern Germany was hit by homemade rockets packed with explosives. In many of these cases, the operatives were not professional spies but ordinary people—young, isolated, or desperate—recruited online and paid in cryptocurrency, sometimes without even knowing they were taking orders from Russian intelligence. Russia weaponized loneliness and vulnerability as effectively as it weaponized drones. It attacked infrastructure, defense manufacturers, airports, and even the perception of reality itself. The timeline of hybrid operations tells the story: political influence in 2018, disinformation in 2020, sabotage plots in 2025, military surveillance by April 2025, repeated drone incursions by September 2025, an attack on a weapons plant in July 2026, and then Leipzig.
The most frightening part of this story is not the violence itself, but how quickly it has become normalized. A drone over a military base is now a routine news item. A suspected Russian sabotage attempt is met with a shrug. In September 2026, German Interior Minister Alexander Dobrindt made it official: the Leipzig attack was not an isolated case, but part of a broader pattern of hybrid actions. Germany has responded, slowly, by expanding intelligence services, building anti-drone shields at airports, expelling Russian diplomatic staff, and closing the Russia House cultural center in Berlin. But these measures cannot undo the deeper damage. Russia’s hybrid war was never only about bombs. It was about making Germans feel uncertain, divided, and exhausted. It was about turning politics into a battlefield where the truth is always in doubt. It was about making an attack with military-grade material on European soil seem like just another day. The defense of Germany now takes place not only at borders and military bases, but in the minds of its citizens. The question is whether Germany can remember that the unthinkable should never become routine—and whether the West has the will to meet this shadow war with the same seriousness it would give to a conventional attack. Leipzig was a warning. Treating it as normal would be the real surrender.