German intelligence powers expanded to combat cyberattacks

German intelligence powers have been significantly expanded by The Bundestag on Friday, November 13, 2026, to allow agencies to respond more aggressively to rising cyber threats and hybrid attacks from foreign actors.

What happened

In a decisive move to modernize the nation’s security architecture, lawmakers in the Bundestag agreed to a comprehensive reform package on Friday. This legislation grants the Federal Intelligence Service (BND), Germany’s foreign intelligence agency, unprecedented authority to engage in active defense against cyber warfare. Under the new legal framework, the BND is permitted to respond to cyberattacks orchestrated by foreign powers with its own counter-operations.

These new capabilities are not limited to the digital realm. The scope of permitted measures is remarkably broad, ranging from the deletion and manipulation of malicious data to the total disabling of entire computer systems. In more extreme scenarios, the agency is now authorized to destroy physical hardware, such as drones, that are being deployed against German interests. Furthermore, the reform allows intelligence agencies to enter homes and business premises covertly to prepare for surveillance operations, though the law explicitly prohibits the use of physical force against individuals during these entries.

To mitigate concerns regarding the potential for abuse, the legislation mandates the creation of an independent oversight board. This body will be tasked with monitoring the agencies’ activities and ensuring they operate within the bounds of the new law. The reform passed with the support of the governing coalition, consisting of the Christian Democratic Union (CDU), the Christian Social Union (CSU), and the Social Democratic Party (SPD).

Why it matters

This legislative shift marks a fundamental change in how Germany approaches national security in an era defined by “hybrid warfare”—attacks that blend digital sabotage with physical disruption. The necessity for these expanded German intelligence powers is driven by a growing realization that traditional law enforcement is ill-equipped to handle state-sponsored digital aggression.

As Holger Münch, the president of Germany’s Federal Criminal Police Office (BKA), noted during the organization’s annual meeting in Berlin this week, the line between criminal activity and state-sponsored espionage is becoming increasingly blurred. This blurring of lines creates a massive gap in the ability of the state to protect its citizens and infrastructure.

To illustrate the stakes, security experts point to the vulnerability of critical infrastructure. Cyberattacks are no longer just about stealing data; they can have tangible, physical consequences. For instance, the Irish supermarket chain SuperValu previously suffered from hacked cooling systems, a type of vulnerability that could be exploited to disrupt food supplies or essential services across Germany. The ability of the BND to strike back at the digital or physical infrastructure of an attacker is seen as a necessary deterrent.

Deep-dive: The evolution of the separation principle

At the heart of this legislative reform is a long-standing and controversial doctrine known as the “separation principle.” For decades, German security has operated under a strict division of labor: the police are responsible for conducting criminal investigations, while intelligence services are tasked with gathering information on threats to national security. Data exchange between these two entities has historically been subject to rigorous and often cumbersome restrictions.

The historical roots of caution

This separation is not merely an administrative choice but a profound constitutional safeguard born from the trauma of the Nazi dictatorship. During that era, the Secret State Police, or Gestapo, operated with virtually no judicial constraints, serving as a central instrument of terror. The Gestapo was used to systematically oppress and murder Jews, Sinti and Roma, homosexuals, communists, social democrats, and many other groups.

Following the defeat of Nazi Germany in World War II, the Allied powers insisted that the police and intelligence services remain institutionally separate to prevent any single organization from ever again wielding such unchecked, centralized power over the population. This historical context has shaped the German approach to civil liberties and state authority for generations.

A modern challenge to tradition

However, the current threat landscape is making this traditional division increasingly difficult to maintain. Holger Münch has long been a vocal critic of the strict separation, arguing that it hampers the ability of the BKA to respond to modern threats. He has called for expanded powers for the police and much closer cooperation with the Office for the Protection of the Constitution, the agency responsible for countering domestic espionage and sabotage.

This sentiment was echoed by Sönke Neitzel, a historian at the University of Potsdam, who spoke at the BKA’s autumn conference. While acknowledging the historical necessity of the separation principle, Neitzel described it as “nonsense” in the context of today’s security environment. He argued that in a country that has functioned as a stable, constitutional democracy for many decades, the strict institutional wall between intelligence and law enforcement may no longer serve its original purpose of preventing tyranny, but instead serves to hinder effective defense.

Stakeholders and the data of rising crime

While the reform has been championed by the government, it has also drawn scrutiny from opposition lawmakers specializing in domestic policy, who warn that the powers being granted are too broad and could potentially infringe on civil liberties.

Alexander Dobrindt, the German Interior Minister from the center-right CSU, has been a primary architect of this shift. Dobrindt has expressed a clear vision for the future of German security, stating that the government must be prepared to strike back against those who attack the nation’s digital infrastructure. “Anyone who attacks us in this way must know that we are prepared to strike back,” Dobrindt said, emphasizing that the digital and software infrastructure of attackers will also be targeted.

His goal is not just to expand the BND but to transform both the BND and the Office for the Protection of the Constitution into “real intelligence services.” This legislative reform is seen as a major step toward achieving that objective.

To justify the urgency of these changes, Münch provided striking statistics regarding the current state of crime in Germany. According to the BKA, in the first six months of 2026, crime originating from abroad rose by 24% compared to the same period in the previous year. More concerningly, Münch noted that fewer than 5% of these foreign-originated cases are currently solved.

This low success rate, according to the BKA chief, threatens the very foundation of the social contract. “The state’s promise of security can become fragile,” Münch warned. “Confidence in the ability of its institutions to act effectively and remain steadfast is declining.”

What it means for you

For the average resident of Germany, these changes represent a complex trade-off between increased security and the potential for expanded state surveillance.

• If you are a business owner or digital professional: You may see a more proactive state defense against the types of cyberattacks that target corporate networks and critical infrastructure. The government’s new ability to strike back at attackers could serve as a deterrent against large-scale industrial espionage.
• If you are a privacy advocate or civil rights activist: You should monitor the activities of the newly established independent oversight board. The ability of agencies to enter premises covertly and manipulate data is a significant expansion of state power that requires constant, rigorous scrutiny to ensure it does not drift into the realm of unauthorized surveillance.
• If you are a voter: This reform signals a shift in the political consensus regarding the balance of power between the state and the individual, moving toward a more active, interventionist security model.

Counterpoints and open questions

Despite the passage of the reform, several critical questions and risks remain at the forefront of the debate. The primary concern raised by opposition lawmakers is the lack of specificity in the new powers. Critics argue that terms like “counterattacking” or “manipulating data” could be interpreted so broadly that they allow for mission creep, where intelligence agencies slowly expand their reach into areas of domestic life that were previously protected.

There is also the question of international law. While the BND is now authorized to perform counterattacks, the legalities of “hacking back” against foreign entities—especially those potentially linked to sovereign states—remain a murky area of international diplomacy and law. How Germany will navigate the potential for escalation following a BND counter-operation is an open question.

Furthermore, the effectiveness of the new oversight board remains unproven. For the board to be successful, it must possess not only the legal authority but also the technical expertise to understand the complex cyber operations it is tasked with monitoring. Without deep technical literacy, the oversight could become a mere formality rather than a genuine check on power.

What happens next

Following the passage of this reform, the immediate focus will turn to the implementation of the new oversight mechanisms. The establishment of the independent board will be a critical milestone, as its structure and authority will determine the actual level of accountability for the BND and other agencies.

Security analysts will also be watching for the first instances where the BND utilizes its new counter-strike capabilities. Whether these actions successfully deter future attacks or inadvertently trigger cycles of digital escalation will be a key indicator of the reform’s ultimate success or failure. Additionally, as the Office for the Protection of the Constitution begins its transition into a more robust intelligence service, the political debate over the erosion of the “separation principle” is likely to intensify in the Bundestag.

Germany’s security landscape is undergoing a fundamental transformation as the state seeks to match the capabilities of modern hybrid threats. By expanding the powers of the BND and pushing for a more integrated security approach, the government is attempting to bridge a critical gap in national defense, even as it navigates the deep historical and legal complexities of its own democratic tradition.”,
“meta_description”: “Germany expands German intelligence powers to counter cyberattacks and hybrid threats

References

• Cyber attacks and hybrid warfare: Germany gives sweeping powers to its police and intelligence services — dw.com

Featured image: Photo by Osviel Rodriguez Valdés on Pexels