The German government has accused Russia of orchestrating a significant cyberattack and disseminating disinformation during the recent federal election campaign, aimed at undermining trust in German democratic institutions. The Foreign Office in Berlin claimed these actions are part of a broader strategy to destabilize Germany, prompting the summoning of Russia’s ambassador and the promise of further repercussions.
The August 2024 cyberattack on the air-traffic control service DFS has been attributed to the Russian hacker group Fancy Bear, with intelligence indicating that Russia’s military intelligence service, the GRU, was responsible. Despite the hack on office communications, flight operations remained unaffected.
Additionally, Germany reported a disinformation campaign named Storm 1516 that has been targeting elections in Western countries since 2024. This campaign, attributed to GRU-backed organizations, involved spreading fake news against prominent German politicians, particularly focusing on the Green Party’s Robert Habeck and conservative candidate Friedrich Merz before the February 2025 election. Various fabricated videos and false testimonies aimed to discredit these candidates.
BND and BfV officials noted that the campaign exemplified how democratic processes are being attacked through an integrated disinformation ecosystem involving pro-Russian influencers and extremist groups. The German government has expressed concern over the rise in hybrid attacks from Russia, which combine military, economic, and propaganda tactics. They are coordinating with European partners for countermeasures, including potential sanctions targeting individuals and continued support for Ukraine.

