Allied Intelligence — 2026-06-29

Germany BND Reform Grants Hack-Back Cyber Capabilities With 25 Percent Budget Increase to 1.51 Billion Euros

BLUFBerlin's likely codification of offensive cyber powers by late October 2026 ends the assumption of passive BND response and compels European partners to accommodate an active German network operator.

Germany has increased the BND's budget by 25 percent to €1.51 billion this year and expects to submit new legislation to the Bundestag by autumn, the Irish Times reported on June 28 1. The proposed law would address signals intelligence authorities, AI and technology use, new powers to conduct offensive "hack-back" cyber operations against adversaries, and revised supervision structures 1. Leaked draft provisions cited by netzpolitik.org in January indicated the BND would be authorized to penetrate foreign networks and covertly break into residences to install state trojans on targeted systems 2. The draft envisions extending metadata retention to 15 months and intercepted content retention to six months, against deletion windows as short as two weeks under current rules 12.

Analysis
The reform legislation is likely to reach the Bundestag by October 31, 2026. High analytic confidence rests on three converging indicators: the budget disbursement is executed, Merz has committed publicly at chancellery level, and the oversight committee chair reports opposition muted rather than mobilized, with the autumn submission timeline now confirmed ministerially rather than inferred from leaked draft provisions. Convergent independent reporting from netzpolitik.org and the Irish Times corroborates scope and timing without contradiction. Constitutional litigation already underway against the current BND Act, combined with civil liberties mobilization once full legislative text is published, could delay submission or force rollback of the hack-back provisions. Allied services operating under tighter domestic legal constraints face a decision on whether to update deconfliction protocols now in anticipation of BND offensive cyber activity, or hold those revisions pending formal enactment.

2 sources

Germany spy agency comes in from the cold - Irish Times
Massenüberwachung und Hacking: Der BND soll neue mächtige Instrumente bekommen - netzpolitik.org