Germany Moves to Arm BND With Offensive Cyber and Sabotage Powers

Key facts

• German cabinet adopted a draft reform expanding BND powers to include sabotage, offensive cyber operations and more aggressive espionage; parliamentary approval still required.
• Reform is justified by rising Russian hybrid threats and concern about overreliance on US intelligence sharing; intended to take effect by 2027.
• Package relaxes certain data-protection constraints (AI, facial recognition, longer retention) and follows a reported ~26% BND budget increase to €1.51bn.

3 minute read

Berlin is attempting a structural break with its post-war intelligence posture. A cabinet-approved reform package would, if passed by both chambers of parliament, permit Germany’s foreign intelligence service, the BND, to move beyond information gathering into operational activity including acts of sabotage, offensive cyber operations and more assertive espionage. The Merz government is explicitly linking the change to an elevated threat environment driven by Russian espionage, influence and sabotage, while also acknowledging a strategic dependency on allied—chiefly US—intelligence that may no longer be assured under a transactional Washington.

The political logic is twofold. First, German officials argue that Russia’s hybrid toolkit now targets the Federal Republic routinely, requiring options to disrupt hostile activity rather than merely document it. Second, senior figures concede that Germany’s long-standing reliance on partner services for sophisticated collection and action has created an asymmetric relationship that leaves Berlin exposed if intelligence sharing is reduced or leveraged. The reform therefore represents a bid for greater sovereign capacity, in line with broader European debates on strategic autonomy, but applied in the sensitive domain of clandestine and cyber operations.

Operationally, the proposal would authorise “active measures” in response to hybrid incidents, ranging—per the source text—from exposure and counter-manipulation to property destruction, pre-emptive sabotage of explosives, or post-incident deception operations. Constraints are described as requiring a direct link to the precipitating incident and prohibiting endangerment of life or physical safety. This language suggests an intent to create a legally defined space for counter-hybrid disruption short of kinetic violence, likely to be tested most in cyber and counter-sabotage contexts.

For Europe, the implications cut across security cooperation and governance. A more action-capable BND could strengthen EU-wide resilience against Russian hybrid activity, particularly where threats spill across borders or target transport and defence logistics nodes. At the same time, expanded authorities for AI, facial recognition and longer retention will intensify scrutiny from privacy regulators and may complicate intelligence sharing with partners that require strict compliance assurances. The reform also raises practical questions of deconfliction with domestic authorities and with allied services operating in the same theatres, especially in cyberspace where attribution and proportionality are contested.

Finally, the increased budget—reported as a roughly 26% rise to €1.51 billion—signals political willingness to resource these ambitions. For procurement and aerospace stakeholders, the direction of travel points to higher demand for sovereign-grade cyber tooling, data analytics, identity resolution, and counter-UAS detection around critical infrastructure, as Berlin seeks to translate legal authority into operational capability by the targeted 2027 entry into force.

Source: Politico.eu