Germany Summons Russian Ambassador Over Cyberattack and Disinformation

Germany has formally accused Russia of conducting a comprehensive cyberattack and disinformation campaign during the recent German federal election, promising retaliatory measures in response to what officials describe as a deliberate attempt to undermine democratic processes.

The German Foreign Office announced Friday that “targeted information manipulation” by Russia forms part of a broader pattern of activities aimed at eroding public trust in Germany’s democratic institutions. In an unprecedented diplomatic move, the Russian ambassador was summoned to the ministry to address these serious allegations.

German intelligence has specifically attributed two hybrid attacks to Russia’s military intelligence service, the GRU. The first involved a cyberattack on the German air-traffic control service provider DFS in August 2024, which Berlin has linked to the Russian hacker group known as Fancy Bear.

“Our intelligence findings prove that the Russian military intelligence service GRU is responsible for this attack,” a Foreign Office spokesman stated. While the DFS acknowledged their office communication systems were compromised, they emphasized that air traffic operations continued normally, with defensive measures implemented to minimize impact.

The second accusation centers on a sophisticated disinformation operation dubbed “Storm 1516,” which German authorities say has been active since early 2024. This campaign primarily targets Western elections, with Germany’s recent federal contest being a significant focus.

According to German officials, Storm 1516 specifically targeted Green Party candidate Robert Habeck and Friedrich Merz, the conservative bloc’s chancellor candidate who ultimately won the election. The campaign allegedly created false testimonies, established websites with fabricated content, and produced fraudulent materials designed to discredit both politicians.

Just two days before Germany’s snap election on February 23, 2025, authorities had warned about fake videos circulating online that falsely suggested ballot rigging was occurring—videos they now attribute to this Russian operation.

“Russia’s actions specifically threaten Germany’s security, not only through its war of aggression against Ukraine but also here in Germany,” the Foreign Office spokesman emphasized. He indicated that Berlin, in coordination with European partners, will “take a series of countermeasures to show Russia a price for its hybrid actions.”

This accusation comes amid growing concerns across Europe about an increase in hybrid threats from Russia. Security experts define hybrid warfare as a strategic approach combining military, economic, intelligence, and propaganda tools designed to influence public opinion and destabilize target nations without conventional military engagement.

At the European level, Germany is supporting new sanctions targeting individual actors involved in these operations, including potential entry bans and asset freezes. The Foreign Office also emphasized that Germany will continue strengthening its support for Ukraine while bolstering its own defense capabilities against such threats.

These allegations represent a significant escalation in diplomatic tensions between Germany and Russia, which have already been strained by Moscow’s ongoing war in Ukraine and previous accusations of Russian interference in European politics.

Cybersecurity experts note that critical infrastructure targeting, as seen in the DFS attack, represents a particularly concerning development in Russia’s hybrid operations against European nations. The sophisticated nature of these campaigns demonstrates an evolution in tactics that combines technical cyberattacks with psychological operations designed to undermine public confidence.

As Germany prepares its response, security analysts suggest this case could become a test of European resolve in confronting hybrid threats that increasingly blur the lines between peacetime competition and warfare.