In late October 2026, Munich-based drone manufacturer Quantum Systems detected signs of an active cyberattack within its corporate networks. According to the company, unknown perpetrators infiltrated the infrastructure and placed malicious software on an update server. The Financial Times reported on the incident on November 12, after which Quantum Systems published an official statement. As a result of the incident, the Bundeswehr temporarily grounded its entire fleet of unmanned aerial vehicles supplied by this contractor as a precautionary measure.
Incident Timeline and Company Position
In a statement dated November 12, 2026, Quantum Systems announced that the cybersecurity incident was identified in late October. An immediately launched internal investigation recorded an “active cyberattack by hostile actors.” The company's IT specialists and security services, in their own words, contained the threat in close and transparent cooperation with competent authorities. Quantum Systems emphasized that, given the measures taken and the nature of the incident, there are no risks to end users and operators of the unmanned systems. The company also pointed out that, in accordance with regulatory requirements, competent authorities were notified of the incident, and the investigation is being conducted jointly with government bodies, as well as external and internal cyber specialists.
Bundeswehr Response: Drone Fleet Grounded
According to the Financial Times, the Bundeswehr grounded Quantum Systems drones as a precautionary measure. Spiegel clarifies that the German armed forces initially grounded the manufacturer's entire fleet of equipment, but according to Quantum Systems representatives, the fleet is currently ready for operation. Germany's Ministry of Defense, citing BR24, did not comment on the situation when requested to confirm this information. Thus, only the fact of the temporary decommissioning of the equipment and its subsequent restoration has been publicly recorded, while the details of decision-making at the military department level remain confidential.
Who Is Investigating the Attack
According to Spiegel, three agencies are simultaneously investigating the incident: the Bundeswehr Military Counterintelligence Service (MAD), the Federal Office for the Protection of the Constitution (BfV), and the Federal Office for Information Security (BSI). This combination of structures indicates that the German authorities are qualifying the event as a threat in military, counterintelligence, and information technology dimensions simultaneously. Quantum Systems confirmed in its statement that the investigation is being conducted in close cooperation with state authorities.
Quantum Systems: Role in the Ukrainian and European Defense Framework
Quantum Systems is a Bundeswehr contractor for several drone systems and has been supplying products to Ukraine for several years, where it has its own production facilities and has established a number of joint ventures with Ukrainian manufacturers. In late summer 2026, the company introduced its first marine drones—the Seavex surface drone and the Subvex underwater drone. Both vehicles were demonstrated at NATO exercises in Portugal and integrated into the MOSAIC UXS software platform, which already combines the company's air and ground systems. In its November 12 statement, Quantum Systems noted that the European defense industry has been subjected to constant cyberattacks for several years, with enterprises supporting Ukraine coming under particular fire as their work is critical to the security of customers.
Broader Context: Attacks on Europe's Defense Sector
The incident with Quantum Systems fits into a series of events affecting European defense companies supplying equipment to Ukraine. For instance, on September 29, Estonia stated that an August fire at the facilities of Milrem Robotics, a defense company producing ground robotic systems for Ukraine, was an arson attack ordered by Russian intelligence services. Tallinn did not release materials confirming Russian involvement, explaining this by the need to maintain the confidentiality of special services' work. Against this background, the attack on Quantum Systems is perceived by European defense structures as a continuation of systematic pressure on the infrastructure ensuring military supplies to Kyiv.
