INCIDENT REPORT · CP-2026-017

Quantum Systems Cyberattack Grounds Bundeswehr Drones

L3 · ELEVATEDCONFIRMED

German military drone maker Quantum Systems confirmed it detected an 'active cyberattack by hostile actors' in October 2026; per the Financial Times and Der Spiegel, attackers reached its update server and pushed a malicious update for its QBase mission-planning software that reached customer servers, including the Bundeswehr's, but not the drones themselves. The company says the attack was contained, and Bamberg prosecutors opened an investigation against unknown persons.

Incident ID: CP-2026-017
Disclosure date: 12 NOV 2026
Detection date: Not publicly documented
Affected countries: Germany
Plotted location: Gilching, Germany (Affected organization headquarters)
Threat classification: Level 3 — ELEVATED
Classification rationale: Supply-chain compromise of a major defense supplier forced a NATO military to ground drones.
Attack type: Supply-Chain Attack
Nature: Malicious activity
Attack vector: Compromised update server used to distribute a malicious update for the QBase ground-control/mission-planning software
Sectors: Defense, Manufacturing
Critical infrastructure: Yes
Organizations affected: Quantum Systems, Bundeswehr
Operational consequences: The Bundeswehr grounded its Quantum Systems reconnaissance drones as a precaution, and according to the FT a recent military exercise went ahead without them; the company says the fleet, including the Bundeswehr's, is flying normally again. The duration of the grounding and number of drones affected have not been disclosed.
Estimated financial impact: No reliably documented figure
Attribution (as stated): No official attribution recorded

SOURCE REFERENCES

RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.

Quantum Systems Cyberattack Grounds Bundeswehr Drones

L3 · ELEVATEDCONFIRMED

Incident ID

CP-2026-017

Disclosure date

12 NOV 2026

Detection date

Not publicly documented

Affected countries

Germany

Plotted location

Gilching, Germany (Affected organization headquarters)

Threat classification

Level 3 — ELEVATED

Classification rationale

Supply-chain compromise of a major defense supplier forced a NATO military to ground drones.

Attack type

Supply-Chain Attack

Nature

Malicious activity

Attack vector

Compromised update server used to distribute a malicious update for the QBase ground-control/mission-planning software

Sectors

Defense, Manufacturing

Critical infrastructure

Yes

Organizations affected

Quantum Systems, Bundeswehr

Operational consequences

The Bundeswehr grounded its Quantum Systems reconnaissance drones as a precaution, and according to the FT a recent military exercise went ahead without them; the company says the fleet, including the Bundeswehr's, is flying normally again. The duration of the grounding and number of drones affected have not been disclosed.

Estimated financial impact

No reliably documented figure

Attribution (as stated)

No official attribution recorded