Investigators identify suspected GRU employee as logistics operative behind drone alarm in Leipzig

In September 2026, drone sightings occurred at Leipzig/Halle and Berlin-Brandenburg airports, temporarily restricting flight operations. German security authorities used the incidents as grounds for investigations into possible espionage and acts hostile to the state. A live TV stream by broadcaster OE24 documented the temporary halt of flight movements at the affected airports during the incident.

Investigation across third countries

According to the report, investigators are examining whether the named suspect coordinated the drones and allegedly introduced them into the Federal Republic via third countries such as Turkey and Serbia. Both countries have been regarded in recent years as hubs for Russian intelligence operations in Europe. Moscow also features at the center of operational planning, according to the documents.

According to the report, the investigation files indicate that the drones were not used exclusively for intelligence-gathering purposes. Rather, investigators are examining whether the aircraft were deliberately positioned to disrupt critical infrastructure and impair civil aviation. The Federal Prosecutor's Office has so far not commented publicly on the status of the investigations.

Connections to the "GRU Berlin" unit

Parallel to the drone incidents, activities of the so-called "GRU Berlin" — an alleged unit tasked with preparing sabotage operations in the Federal Republic — came to light during the same period. Security experts view the current revelations as evidence of a coordinated campaign by Russian intelligence services on German soil. The federal government has repeatedly pointed to possible Russian hybrid operations and announced consequences.

The "Welt am Sonntag" research also provides details on the suspect's travel activity, alleging that he moved repeatedly between Moscow, Belgrade, and Istanbul. Investigators assume these routes served the preparation and logistics of the operation. According to the report, the Turkish authorities have been informed of the findings; a statement from Ankara has not yet been received.

Possible consequences and extradition

Legal experts see the revelations as a possible basis for an extradition request. Since Turkey could conduct its own criminal proceedings, it remains unclear whether Germany will file its own charges. A possible conviction in absentia is also considered an option should the allegations be substantiated.

The incidents in Leipzig and Berlin had far-reaching consequences for air traffic at the time: hundreds of flights were delayed, and passengers were stranded at the airports. The economic damage was estimated at several million euros. The findings now published intensify the political pressure to review the security arrangements at German airports.