Investigators have identified Russian national Oleg Levushkin as the suspected organizer of an attempted drone attack at Germany’s Leipzig/Halle Airport. The August 4 operation involved a Semtex-laden drone near a Ukrainian transport aircraft, prompting Berlin to close the Russian consulate in Bonn and rescind the contract for the Russian House cultural centre in Berlin.
It was almost midnight on August 4, 2026, when a bus driver moving across the tarmac at Leipzig Airport in Germany’s east noticed debris next to a large Ukrainian aircraft. What appeared to be ordinary wreckage included a vegetable soup can packed with 600 grams of Semtex explosive, a device carrying enough force to obliterate everything within a 10-metre radius. Airport police arriving 30 minutes later recovered two additional drones carrying more than a kilogram of high-powered explosives.
The event involving a drone packed with explosives found close to a Ukrainian plane at Leipzig-Halle Airport was characterized by Andy Burnham as an egregious and reckless attack
. This remark followed comments from German interior minister Alexander Dobrindt stating that the August 4 strike formed part of a sequence of Russian hybrid operations
. German authorities subsequently attributed responsibility directly to Moscow, prompting Foreign Minister Johann Wadephul to announce that the Russian consulate in Bonn would close and the operating contract for the Russian House cultural centre in Berlin would be rescinded. Following this, the diplomatic mission in Bonn representing Russia is scheduled to shut down starting September 18, alongside the cancellation of the agreement governing the Berlin Russian House cultural venue. Moscow denies any involvement in what happened.
Oleg Lyovushkin Organized Logistics and Reconnaissance in Germany
A joint investigation published by The Telegraph and Welt am Sonntag, drawing on intelligence documents from Germany, Lithuania, and Poland alongside Western security officials, named Russian national Oleg Lyovushkin—also identified in reports as Oleg Levushkin—as the suspected organizer of the logistics and on-site reconnaissance. Investigators state that Levushkin arrived in Germany via Turkey, rented a car at Berlin Brandenburg Airport on July 27, and conducted surveillance around Leipzig/Halle Airport by July 31. According to Süddeutsche Zeitung, cited by The Telegraph, Levushkin and Denis Smolyaninov met in 2007, when Smolyaninov mediated a financial dispute involving Levushkin’s business.
German security services believe the explosives involved in the plot traveled through Bulgaria and Serbia hidden inside trucks. Levushkin allegedly recruited a Belarusian intermediary named Andrei Karshakov to carry out the attack. Furthermore, Andrei Karshakov was named by The Telegraph as the individual who executed the sabotage operation at Leipzig Airport. Investigative reporting indicates Levushkin lived in Riga until at least 2018 before moving to Russia’s Pskov region in 2019 and later to Sevastopol, maintaining long-term ties with Denis Smolyaninov, a colonel in Russia’s military intelligence agency, the GRU. Smolyaninov heads a department in its Special Activities Service, which specializes in sabotage operations abroad.
According to reports linking the operation to military unit 29155, the Leipzig sabotage shares operational DNA with past covert missions in Europe. The unit’s roster includes Anatoly Chepiga and Alexander Mishkin, the GRU officers accused of the poisoning of Sergei and Yulia Skripal and carrying out sabotage in the Czech Republic. They used the names Ruslan Boshirov and Alexander Petrov, respectively. The unit has been part of the Special Activities Service since 2023.
Forensic Links Across European Sabotage Operations
Security analysts point out that the Leipzig attempt fits into a much wider continental campaign. Western officials have tracked around 200 incidents of sabotage and malign activity blamed on Russia across Europe since the invasion of Ukraine.
Investigators discovered striking technical resemblances between the Leipzig drone device and earlier explosive caches recovered across Europe. On August 20, 2024, bomb disposal teams acting on a tip from Poland recovered two tin cans filled with explosives from a weathered grave in Kaunas, Lithuania. Subsequent discoveries followed in January and June 2025.
Forensic examination by the Forensic Science Service of the Police Department of Lithuania revealed that metal plates fitted to those devices and stamped with circular indentations were highly likely to have been manufactured by the same machine, connecting the Leipzig device to a coordinated logistical pipeline across eastern and central Europe.
Strategic Airlift Hub Under Threat
Leipzig/Halle Airport serves a vital strategic function as a major cargo hub and a central node for supplies to Ukraine. The facility houses NATO’s Strategic Airlift International Solution, known as Salis, which operates almost every day carrying equipment to alliance battle groups along Europe’s eastern flank from Finland to Romania. The planes that regularly use it include Ukrainian Antonov transport aircraft.
The August 2026 drone incident followed an earlier logistical attack at the airport in 2024, when an incendiary device ignited inside a freight container before it could be loaded onto a cargo plane. Security officials view these actions as a direct response to Western military assistance for Kyiv.
“By attacking Germany and other nations within NATO, Russia is implementing a price on us, on the West, for its support towards Ukraine.”
Colonel Johan Schmid, senior ranking member of the German armed forces
Colonel Schmid noted that hybrid warfare was not taken seriously enough between 2014 and the invasion of Ukraine, noting that Moscow views hybrid attacks as equal in importance to conventional military methods. In response to the intensifying shadow war, the German Cabinet approved plans in mid-August to grant intelligence services broader powers for actions such as disabling sabotage and hacking attempts.