The short version
- German officials confirmed a federal probe into a weapons cache found in a forest outside Berlin, suspecting it was intended for violent acts threatening national security.
- Intelligence agencies believe the stash is connected to Russian operatives plotting targeted attacks on defense executives and political figures who support Ukraine.
- Authorities are seeking the extradition of a low-level agent from Romania, while noting that no one attempted to retrieve the disabled weapons after their discovery.
German federal prosecutors have launched a formal investigation into an underground cache of weapons discovered in a forest near Berlin, marking a significant escalation in domestic security concerns. Interior Minister Alexander Dobrindt confirmed that authorities are examining the site on suspicion of preparing serious violent acts that threaten national stability. The discovery follows a recent incident at Leipzig airport involving a drone carrying explosives, reinforcing official warnings that Germany is operating under a heightened threat level.
The weapons stash, which includes two handguns and ammunition, was unearthed approximately one year ago after domestic intelligence agents received a tip. Rather than immediately removing the items, security services rendered them unusable and left them in place to conduct months of electronic surveillance. This strategy aimed to identify individuals attempting to retrieve the arms, but investigators reported that no one approached the site. Officials now believe the cache is effectively dead because the operatives involved likely learned of its discovery.
Media reports indicate that state security and counterespionage services suspect Russian intelligence agencies were behind the plot. The operation appears to align with broader concerns about aggressive tactics employed by Moscow’s secret services against German soil. Sinan Selen, head of the Federal Office for the Protection of the Constitution, has warned in recent months of increased hostility from Russian operatives, including plans for targeted strikes within Germany.
Investigators are focusing on a suspect currently located in Romania, whom Dobrindt described as a low-level agent. German authorities are seeking this individual’s extradition to face charges related to the Berlin cache. Several other operatives have been detained earlier this year in connection with similar activities. The nationality of the Romanian suspect was not disclosed, but the case highlights ongoing efforts to dismantle networks believed to be facilitating sabotage and intimidation.
The potential targets of these alleged plots include prominent figures who support Ukraine’s war effort. Reports suggest that Moscow’s list may feature weapons contractor executives, opposition politicians in exile, and other key supporters of Kyiv. Specifically, there are indications that Stefan Thumann, the head of German drone manufacturer Donaustahl, was a target. German investigators were reportedly tipped off by a foreign intelligence service late last year, leading to the arrest of a Ukrainian man and a Romanian woman this spring.
Thumann is currently under police protection following these revelations. The case echoes previous incidents where Russian plots against defense industry leaders were thwarted. In 2024, US intelligence services reportedly foiled an attempt on the life of Armin Papperger, chief executive of Rheinmetall, Germany’s leading arms manufacturer. That plot was considered one of several schemes aimed at killing executives in European countries supporting Ukraine, with the attack on Papperger believed to be the most advanced.
The Berlin cache is also being examined for possible links to a wider sabotage campaign against Ukrainian logistics routes. German authorities are investigating connections between the arms stash and incidents involving incendiary devices mailed from Romania. Last year, Polish security officials arrested individuals allegedly planning to send parcels containing detonators or explosives via postal services. These packages were believed to be designed for remote ignition or timed detonation during transit.
Such devices pose a severe risk to vehicles, cargo planes, and logistics centers, aiming to spread fear across the European Union. A notable example occurred in 2024 when a firebomb sent through DHL exploded in a freight container at Leipzig airport tarmac. The explosion was contained because of a delayed flight, preventing it from occurring in mid-air. Ukraine has utilized Leipzig as an alternate hub for military goods transport since Russia’s full-scale invasion began in February 2022.
Despite these allegations, the Russian embassy and federal prosecutor’s office declined to comment on the specific investigation. A spokesperson for Germany’s domestic intelligence agency stated that they do not comment on matters relating to specific intelligence activities as a matter of principle. Russia has repeatedly denied any involvement in sabotage, disruption, or intimidation campaigns against EU member states, maintaining that such accusations are unfounded.
The rapid announcement of the investigation by Interior Minister Dobrindt suggests a desire to address growing public concern and demonstrate proactive security measures. The case underscores the complex nature of modern hybrid warfare, where traditional espionage blends with criminal sabotage and targeted violence. As investigations continue, German authorities remain vigilant against further attempts to destabilize national security through covert operations linked to foreign powers.
Sources behind this briefing
Go to the original reporting
- The Guardian US↗Gun stash discovered in German forest believed to be linked to Russia, say reports
