Germany’s domestic intelligence service (BfV) assesses the threat of Russian espionage and sabotage against defence companies—especially those cooperating with Ukraine—as high.
This was reported by Ukrinform, citing a BfV warning issued to the German economy.
The agency also does not rule out attacks on individual employees, primarily company executives.
“The threat to security and defence-sector companies in Germany, especially those cooperating with Ukraine, remains high. There is an increased likelihood that relevant companies will become targets of intelligence and sabotage activities by Russian state structures or individuals acting on their behalf,” the statement says.
The BfV added that, depending on how the war develops, even targeted attacks on specific individuals cannot be ruled out—above all, members of senior management.
Counterintelligence recalled that in April 2026 the media circulated a list from Russia’s Ministry of Defence naming 21 European companies that Moscow accused of involvement in the production and supply of drones for Ukraine. It included three companies located in Germany. After that, Russian Security Council Deputy Chairman Dmitry Medvedev called these companies “potential targets” for Russian forces.
According to the BfV, publication of the list may primarily have been a reaction to an agreement by Chancellor Friedrich Merz and Ukrainian President Volodymyr Zelenskyy to deepen security cooperation between the countries.
The document also cites cases of suspected activity by Russian special services in Germany. In particular, the federal prosecutor’s office detained several people in March and April on suspicion of agent activity. One suspect is accused of passing to a Russian intelligence service information about Germany’s military support for Ukraine and about companies developing drones and robotic systems. Investigators say he also provided information about potential targets for sabotage in Germany and offered to recruit other individuals for espionage and sabotage activities.
Two other suspects are accused of surveilling a person whose company supplies drones and components from Germany to Ukraine. The BfV believes this may have been preparation for further operations against that individual.
Counterintelligence sees a particular danger to military logistics that ensure the delivery of aid to Ukraine. The BfV calls military facilities and logistical routes to Ukraine priority targets for Russian espionage and sabotage.
Among other threats to defence companies, the BfV cites cyberattacks, phishing via messaging apps, the collection and sale of employees’ geolocation data, attempts to circumvent sanctions to supply products to Russia’s defence industry, as well as attacks by pro-Palestinian and far-left extremist groups.
The BfV recommended that companies strengthen physical, information, and cybersecurity, conduct regular staff training, limit the publication of data about facilities, technologies, and employees, use computer-network segmentation, and carry out penetration testing.
Employees of defense companies are urged not to disclose specific workplaces, tasks, and projects on social media, not to use private messaging apps for official information, and to report suspicious surveillance, damage to fences, drone flights, and possible reconnaissance attempts.