German security agencies tie the Leipzig plan to GRU Unit 29155, a network suspected of orchestrating sabotage in Europe to sow insecurity and sway support for Ukraine.

Intelligence from Germany, Lithuania, and Poland, along with Western secrets services, links Lyovushkin and Karshakov to the operation and notes patterns similar to other alleged Russian sabotage efforts in Europe.

The Leipzig device mirrors those used in other suspected Russian sabotage cases, suggesting a broader operational pattern connected to GRU Unit 29155.

Investigators identified two suspects, Oleg L. and Andrey K., with DNA on a drone component and explosives, and traced cross-border travel; one suspect left Germany two days before the attack, while the other entered the Schengen Area via a Minsk-issued visa.

Explosives were reportedly transported in truck cavities and stored along the route; Lyovushkin’s GRU ties were known at entry, but he was not placed under surveillance.

Related incidents include a drone with explosives found near Leipzig/Halle in August, with video analysis suggesting multiple drones; Germany attributed Russia’s involvement in the broader attack context, leading to the shutdown of a Russian consulate and the Russian House in Berlin.

Earlier drone incidents at Leipzig Airport in early August are linked to foreign-state involvement, with Ukraine reporting no injuries or damage to its aircraft.

Lyovushkin’s life appears normal—motorcycle racing, travel, fishing, and family time—raising questions about covert activity hidden in everyday routines.

Investigators allege Lyovushkin traveled to Germany via Turkey, rented a Berlin-area car a week before the operation, and moved through storage sites where weapons were kept, with explosives transported through Bulgaria and Serbia.

Evidence suggests a proxy route via Bulgaria and Serbia for explosives, with initial reconnaissance at Leipzig and Berlin airports after arrival in late July through Turkey.

Explosives were smuggled into Germany in trucks via Bulgaria and Serbia, with recon at Leipzig Airport following entry in Berlin.

The Leipzig drone device resembles bomb containers found in Lithuania, featuring tin cans and circular indentations, indicating a shared operational method under review.