A broad investigation ties Lyovushkin to a Russian sabotage network operating across Europe, with operations in Poland, Lithuania, and Germany controlled by GRU unit 29155 and possibly supported by the GRU’s covert operations network.

Lyovushkin is linked to Denis Smolyaninov, a figure Western intelligence views as coordinating European sabotage, who has a background in Ukraine desk duties and involvement in psychological operations.

German security agencies view the Leipzig attack as part of a wider strategy to destabilize Europe over Ukraine support and to sway debates on Kyiv aid.

Investigators identified two suspects, Oleg L. and Andrey K., with DNA on a drone component and explosives, and travel details showing cross-border movement, including a German exit two days before the attack and a Minsk-issued visa used to enter the Schengen Area.

Earlier incidents include a drone with explosives found near a Ukrainian Antonov at Leipzig/Halle in early August, with video analyses suggesting multiple drones; Germany attributed the broader attack to Russia and closed a Russian consulate and the Russian House in Berlin.

Previous drone findings at Leipzig Airport in August and early September pointed to foreign-state involvement, with Ukraine reporting no injuries or damage to Ukrainian aircraft.

Explosives were allegedly transported into Germany hidden in truck cavities and stored along the route; Lyovushkin’s GRU ties were known at entry, but he was not placed under surveillance.

German authorities suspect Lyovushkin supplied the explosives and tasked Karshaku with carrying out the attack.

Investigators believe explosives reached Germany via Bulgaria and Serbia, concealed in trucks, and that Lyovushkin conducted reconnaissance at Leipzig Airport after arriving in Berlin via Turkey in late July.

Lyovushkin allegedly traveled to Germany through Turkey to prepare the Leipzig plan, renting a car near Berlin and moving weapons through Bulgaria and Serbia with on-route storage.

Levushkin provided logistical support and helped prepare the attack, travelling from Turkey to Berlin in late July, then renting a car on July 27 and conducting reconnaissance near Leipzig/Halle Airport on July 31.

Germany formally accused Russia of involvement in the Leipzig attack, while the Russian Embassy denied involvement in the incident and in European sabotage more broadly.