Adversary Intelligence — 2026-08-26

Third Explosive Drone Found Near Leipzig Airport as Investigation Points to Russian Intelligence Sabotage

BLUFThree explosive drones and a concealed control site near Leipzig/Halle Airport establish a sustained sabotage campaign against NATO logistics, yet formal German attribution of Russia remains very unlikely within 60 days.

German investigators recovered a third drone and roughly 50 grams of a suspected military-grade explosive, believed to be hexogen (RDX), on August 14 in a field near Leipzig/Halle Airport, according to public broadcasters NDR and WDR and the daily Süddeutsche Zeitung 12. The find follows an August 5 incident in which a drone carrying explosives and a detonator was discovered near a Ukrainian Antonov cargo plane, and a DHL aircraft separately aborted landing after apparently colliding with a second, unrecovered drone 123. Investigators also located an antenna and control equipment taped to a tree in nearby Kursdorf, along with scorched earth and metal fragments they are examining as a possible blast site 12. German media have reported that the drones and explosives may be linked to Russian intelligence, though federal authorities have not publicly named a suspect. Interior Minister Alexander Dobrindt earlier said "many indications" point to a state actor without identifying one, and Chancellor Friedrich Merz said those responsible "will pay for this" 23. The Russian Embassy in Berlin has called the allegations a "fabricated provocation" 1.

Analysis
A third recovered drone, hexogen explosive, and a second suspected control site in Kursdorf point to a multi-drone sabotage plot rather than a single failed strike, hardening the case for state-directed intelligence action. Formal German attribution of Russia remains very unlikely within the next 60 days despite officials' private conviction. Read against the concurrent Estonian GRU espionage conviction, the operation fits a pattern of multi-vector Russian intelligence activity against NATO allies using different methods against different targets. Moderate confidence reflects consistent physical evidence across three sites but no disclosed forensic link to a specific service, and reporting on Russian involvement traces to German media rather than confirmed official sourcing. The dispersed devices and unrecovered second drone leave open that a non-state or proxy actor used Russian-sourced material to give Moscow deniability. Formal attribution would push Berlin toward sanctions or NATO consultation; absent it, the response stays confined to airport security and domestic prosecution.

3 sources