Revealed: Known Russian spy was behind Leipzig drone attack
Suspects named as investigators trace the bomb plot at German airport
The drone, on the runway beside the Antonov aircraft, flew with an explosive concealed in a tin Credit: Welt
Alexander Dinger.
Ibrahim Naber.
Lennart Pfahler
Published 12 September 2026 8:00am BST
Germany has identified two suspects behind the
Leipzig airport attack, including an agent linked to Russia’s GRU intelligence unit, the Axel Springer Global Reporters Network can reveal.
Welt am Sonntag, which like The Telegraph is part of the Global Reporters Network, has reviewed confidential documents and interviewed senior officials to confirm the identities.
The two suspects have been named as Russian citizen Oleg Le, who was responsible for the planning of the failed drone attack, and Andrei Ka, a Belarusian citizen.
Mr Le is understood to be linked to the GRU, Russia’s military intelligence unit, and was responsible for the logistics of the attack, while Mr Ka acted as a so-called “disposable agent”.
German authorities said Mr Le entered Germany via Turkey through Berlin-Brandenburg airport. He later departed from the capital’s airport, bound for Serbia. He is now back in Russia.
According to information obtained by Welt am Sonntag, investigators were already aware at the time of his entry that he was associated with the GRU. Nevertheless, he was not put under surveillance after his arrival.
The failed drone attack on Leipzig-Halle airport on Aug 4 marked one of the most serious escalations yet in tensions between Berlin and Moscow.
The airport was targeted by an explosives-laden drone, which was discovered
near a Ukrainian Antonov cargo aircraft and safely defused. Investigators found debris from two additional drones near the airport.
Senior sources provided Welt am Sonntag with the suspects’ names as well as details regarding their entry into and departure from Germany.
The same evidence allowed Johann Wadephul, the German foreign minister, and Alexander Dobrindt, the interior minister, to take the unusual step of publicly blaming Russia for the attack.
Mr Ka, the Belarusian citizen, entered the EU’s open travel
Schengen Area via Latvia on July 28, about a week before the incident. Authorities believe he is a “disposable agent”, a criminal hired to carry out acts of sabotage.
Mr Le is said to have organised explosives and directed Mr Ka. According to authorities, approximately 1.8kg of the explosive Semtex was to be used.
The Antonov aircraft, which was the target of the attack, was filled with approximately 25,000 litres of jet fuel. Sources familiar with the investigation believe that, if the explosive charge had detonated, it would have triggered a massive explosion and destroyed parts of the airport.
Previously unseen surveillance camera footage obtained by Welt am Sonntag shows the drone lying next to the Antonov aircraft. According to authorities, the explosive was concealed inside a tin. The explosion did not occur because a detonator broke off.
Footage shows the drone lying next to the Antonov aircraft at Leipzig-Halle airport Credit: Welt
One day after the attempted attack, police officers found an antenna-like structure, secured with tape in a tree, near the airport. It is believed it was used to control the drones.
On the structure, forensic technicians found remnants of a glove with DNA traces. The DNA traces had previously been recorded in Finland and Lithuania. Mr Ka has criminal records in those countries: in Finland, he is listed, among other charges, for theft.
The Polish authorities also believe Mr Ka was involved in a fire at a home improvement shop in the city of Łódź in 2024, which local prosecutors have classified as sabotage.
According to Polish prosecutors, the evidence in that case also points to Russia. The fact that Mr Ka was also involved in the Leipzig attack is seen as further evidence of Russian involvement.
The authorities found that the explosives used in Leipzig came via Bulgaria and Serbia. Investigators believe they were transported in hidden compartments of trucks and subsequently hidden in underground caches.
The Semtex was hidden in a tin and mounted on the drone Credit: Welt
Police found several possible hiding places in the area surrounding Leipzig airport after analysing data from a rental car used by the suspects.
Confidential documents seen by Welt am Sonntag mention a concrete slab with two handles that was discovered near a pedestrian bridge in the town of Schkeuditz, directly south of the airport.
Authorities believe it provided access to a hideout. Shortly afterwards, police found another suspected hideout north of the bridge. Both storage places were empty.
Investigators also located a hideout in the town of Merseburg, which is also part of the Halle/Leipzig area.
According to the authorities, Mr Le may have temporarily stored the explosives there.
An examination of the drone that landed on the airport runway revealed that it was a homemade device made from readily available parts, some of which were manufactured using a 3D printer.
The four motors were a Chinese brand that is also sold in Russian online stores specialising in “combat technologies”. The tin filled with Semtex was attached to the drone with a mount.
European investigators are familiar with this modus operandi. They see it as strong evidence of a large-scale GRU operation, which, much like previous ones, relied on common criminals lured with offers of cash. Mr Ka remains on the run.