Germany Expands Spy Powers Amid Russian Threat Fears
Germany’s Spy Revolution: New Powers Allow Intelligence Agencies to Hack, Disrupt and Strike Back
A foiled explosives-laden drone attack at Leipzig/Halle Airport. Growing fears of Russian espionage and sabotage. Now Germany is preparing to give its intelligence agencies powers that reach far beyond traditional spying, raising a fundamental question: how much authority should a democracy give its secret services to defend itself?
The German parliament has approved a sweeping intelligence reform that could transform how the country confronts foreign threats. Under the new framework, intelligence agencies will be able to move beyond collecting information and, under specified legal conditions, actively disrupt hostile operations, from disabling hackers’ infrastructure to conducting covert interventions.
The decision marks a major shift in Germany’s security approach. But it also opens a sensitive debate about surveillance, privacy and the limits of state power.
From watching threats to striking back
For decades, Germany’s intelligence services operated under strict post-war legal restrictions designed to prevent the concentration and abuse of state power.
The new reform changes the operational landscape.
Germany’s foreign intelligence service, the Bundesnachrichtendienst (BND), will gain additional authority to intervene against threats originating abroad. Its potential tools include disrupting servers operated by state-backed hacking groups, deleting stolen data and interfering with systems used to prepare hostile operations.
The domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), will also receive expanded powers. Under specified circumstances, it will be able to take technical measures against serious threats, including cyber operations and covert interventions.
German reporting also identifies provisions allowing certain covert entries into homes or business premises to prepare surveillance operations. These are intelligence powers subject to legal conditions, not a general authorization for agents to arrest people or conduct unrestricted searches. Those coercive police functions remain with law enforcement.
In practical terms, Germany is seeking to close a gap that officials say has allowed intelligence agencies to identify threats without always having the authority to stop them.
Leipzig-Halle: the incident that sharpened the alarm
The reform comes against a backdrop of growing security concerns and one incident in particular has intensified the debate.
On August 4, an explosives-laden drone was discovered near a Ukrainian Antonov aircraft at Leipzig/Halle Airport. Authorities defused the device before it could cause an explosion.
The airport is more than a commercial transport hub. It also plays a role in international freight operations and logistical support for Ukraine.
On September 1, German Interior Minister Alexander Dobrindt publicly attributed the attempted attack to Russian state-linked actors, citing investigative and intelligence findings, including similarities between the drone’s components and equipment associated with previous Russian hybrid operations.
Moscow rejected the accusation. Russian officials dismissed Berlin’s claims, while President Vladimir Putin alleged that evidence had been planted, without providing evidence for that assertion.
The incident exposed the challenge facing European governments: hostile operations may arrive not through conventional military confrontation, but through drones, cyberattacks, sabotage and covert networks.
For Berlin, the question is increasingly whether traditional intelligence gathering is enough.
A new intelligence battlefield and a controversial response
The legislation is not limited to conventional espionage.
It reflects a broader understanding of hybrid threats: attacks that combine digital operations, covert activity, sabotage and information manipulation.
Among the measures described in German reporting are the ability to disrupt hostile computer systems, redirect digital traffic, delete information used in attacks and, in certain circumstances, spread targeted false information as an operational countermeasure.
The reform also expands technical surveillance capabilities, including provisions involving telecommunications monitoring and biometric data matching.
An independent oversight body involving former judges is intended to examine the legality of certain measures. The government argues that stronger capabilities must operate within legal boundaries and appropriate supervision.
But the debate is far from settled.
Critics warn that expanding intelligence powers risks weakening the traditional separation between intelligence services and police, a principle deeply rooted in Germany’s post-war constitutional order.
The concern is not simply whether agencies can stop foreign hackers or sabotage networks. It is whether powers created to confront external threats could eventually be used too broadly, including against people inside Germany.
Parliament approves the reform, but the debate continues
On November 13, the Bundestag approved the reform following a heated debate.
According to the parliament’s official record, 308 lawmakers voted in favor, 190 opposed the proposal and 71 abstained. The governing CDU/CSU and Social Democratic parties supported the legislation, while the Alternative for Germany and Die Linke opposed it; the Greens abstained.
Interior Minister Alexander Dobrindt described the package as a historic reform, arguing that German intelligence services need capabilities comparable to those of their European partners.
Opposition voices raised concerns about the scale of the new powers and the potential consequences for civil liberties and the rule of law.
The disagreement goes to the heart of Germany’s security dilemma: how to defend an open democracy against covert attacks without undermining the freedoms that define it.
Europe’s security architecture faces a turning point
Germany’s decision has implications beyond its borders.
As European governments confront allegations of sabotage, cyber intrusions and foreign interference, intelligence cooperation and the ability to respond quickly are becoming increasingly important.
The German reform could strengthen Berlin’s role in Europe’s security architecture. It also raises questions for neighboring countries about intelligence oversight, cross-border cyber operations and the balance between national security and individual rights.
For the wider Middle East, the implications are worth watching too. European security decisions can affect diplomatic relations, cybersecurity cooperation, aviation security and the protection of critical infrastructure, all issues with international consequences.
The question Germany cannot avoid
Germany has voted to give its intelligence agencies a more active role in confronting threats.
But the real test will not be how many systems they can penetrate, how many servers they can disable or how effectively they can disrupt hostile networks.
It will be whether those powers can protect the country without weakening the democratic safeguards they are supposed to defend.
