The Factory Is a Front Line

In March 2026, the German Federal Prosecutor arrested two people in North Rhine-Westphalia and Spain on suspicion of spying for Russia. Their target was not a politician, a general, or a scientist. It was a businessman who builds and ships drones to Ukraine. The case barely made the evening news. It deserved more attention, because it sits at the intersection of three developments that are reshaping European security: the transformation of warfare by cheap autonomous weapons, the reinvention of Russian espionage after the mass diplomatic purge of 2022, and the structural incapacity of Germany's intelligence architecture to keep pace with either.

This dossier approaches the arrests from three editorial perspectives, each illuminating a different layer of the same event.

PRISM examines the supply chain itself. Drones have become the defining weapon of the Ukraine conflict, consumed at rates of thousands per month, assembled from civilian components sourced globally, and produced by small companies that operate without the security infrastructure of traditional defense contractors. When a state intelligence service targets a single entrepreneur in an industrial park, it is not pursuing a person. It is mapping a logistics network that stretches from Chinese component manufacturers through European assemblers to Ukrainian front lines. The vulnerability is structural: the openness that allows these companies to innovate and deliver quickly is the same openness that makes them soft targets. PRISM traces the paradox through export control regimes, dual-use regulations, and the gap between threat assessments and available protections.

MERIDIAN pulls back to the continental picture. The arrests fit a pattern that has emerged across Europe since 2022, when coordinated diplomatic expulsions removed more than 600 Russian intelligence officers from Western embassies. Russia's response was not retreat but restructuring. The old model of embassy-based officers with diplomatic immunity gave way to a new architecture built on recruited civilians, third-country nationals, and disposable proxies. A Romanian and a Ukrainian arrested in Germany are not anomalies. They are data points in a documented shift from professional intelligence officers to expendable assets who cost less to run and nothing to lose. MERIDIAN traces this transformation through Cold War parallels, maps the division of labor between Russia's three intelligence services, and connects the espionage surge to the broader hybrid campaign of sabotage, cyberattacks, and disinformation that has intensified across the continent.

SIGNAL turns the lens on the institutions that are supposed to catch these operations. Germany's domestic intelligence service, the BfV, covers 84 million residents with fewer personnel per capita than its British or French counterparts. Its budget has grown since the Zeitenwende, but the 100 billion euro defense fund went to military hardware, not intelligence capacity. The federal structure splits counterintelligence between seventeen agencies with imperfect information sharing. Espionage prosecution relies on a statute with moderate penalties and evidentiary requirements that discourage aggressive use. The DACH-specific perspective digs deeper into these institutional mechanics: the Parlamentarisches Kontrollgremium's recurring warnings, NRW's status as an industrial espionage hotspot, and the political incentive structure that makes intelligence reform perpetually unrewarding.

Read together, these perspectives reveal something that no single article can capture on its own. The drone supply chain is vulnerable because the companies are unprotected. The companies are unprotected because the intelligence apparatus is under-resourced. The apparatus is under-resourced because political reform has not followed the rhetorical shift of the Zeitenwende. And the espionage threat that exploits all of this is not a legacy problem but an actively adapting adversary that has already rebuilt its operational capacity using methods the old defenses were not designed to detect. The arrests in North Rhine-Westphalia and Spain are not the story. They are the visible edge of a structural mismatch between the threat and the response, and that mismatch is the story this dossier tells.