German security authorities have identified two suspects in the failed drone attack on Leipzig/Halle airport and are treating the case as part of a broader pattern of Russian-linked hybrid operations in Europe, according to reporting by NDR, WDR and Süddeutsche Zeitung cited by Tagesschau.
The investigation centers on a botched attempt to use drones loaded with explosives against the airport in Saxony. In a briefing on the case, Interior Minister Alexander Dobrindt said the evidence pointed to people who had acted on behalf of Russian state bodies. He described the incident as matching what he called the familiar pattern of Russian hybrid operations on the continent. The government has also said it sees the Russian state behind the attack.
Investigators have now gone beyond the initial suspicion phase. According to the reporting cited in the packet, the Federal Criminal Police Office has identified two suspects. One is said to be a Belarusian man whose DNA was found in the case material and who also holds a Russian passport. Authorities reportedly reconstructed his travel into and out of the Schengen area. The reporting says he entered with an Italian tourist visa issued in late April at an Italian foreign mission in Minsk. The man is also said to have previously come to the attention of investigators in the Baltic region.
A second suspect is described as a logistics and instruction figure for the operation. He is said to have entered Germany at Berlin Brandenburg airport at the end of July, then travelled on to Saxony in a rental car before leaving by plane two days before the failed attack. That suspect is said to hold both Latvian and Russian passports.
The investigation is being driven in part by forensic traces. Police found DNA on multiple objects, including a drone, the inside of a can filled with explosives and an antenna attached to a tree near the airport. Those traces produced matches in European databases, including in Lithuania and Finland. Intelligence information then added to the case against the suspected operatives.
The reporting says investigators now believe more drones may have been involved than was first known. Three flying devices have so far been found, either intact or in parts, but technical traces indicate the operation may have extended beyond that number. Officials have not said how close the attack came to success, but the case has prompted concern that the suspects may not be available for arrest. Investigators are reportedly skeptical they will be able to detain the people they believe carried out the operation, in part because previous Russian-linked sabotage and espionage cases have often ended with suspects remaining out of reach in Russia.
Moscow has denied responsibility. The Russian embassy in Berlin dismissed the allegations as a hastily assembled provocation and said it was concerned about a new wave of anti-Russian hysteria in Germany.
The case comes amid sustained European concern over sabotage, covert action and other hybrid threats linked to the war in Ukraine and wider tensions with Russia. German officials have responded with a pledge of additional sanctions, framing the airport case as part of a security challenge that extends beyond the immediate criminal investigation. For now, the public record in the case is still built largely on forensic evidence, travel data and intelligence assessments rather than public arrests or court filings. But the emerging picture is one of a planned attack that investigators believe reached into several countries, used false or layered travel identities and left behind enough material trace evidence to narrow the search significantly.
