Slovak Intelligence Chief Urges Caution Over Reports of GRU Network

Pavol Gašpar, head of Slovakia's Information Service (SIS), called on 26 September for restraint from opposition politicians and media in handling unverified reports that a network linked to Russia's GRU military intelligence had operated from Slovakia, after German outlet Frankfurter Allgemeine Zeitung reported the group's alleged role in an arson attack in Munich and a foiled plot near Prešov.³¹

Munich arson and German investigation

According to Deutsche Welle, which cited FAZ, someone in a moving vehicle hurled incendiary devices onto a construction site adjacent to the Munich headquarters of Rohde & Schwarz and Helsing on 3 September. The fire was quickly extinguished, caused only minor damage and injured no one; a second flammable object at the scene did not ignite and was defused.²⁵

German investigative bodies linked the arson to Russian special services, according to FAZ, which cited sources in German security agencies. German authorities are reported to hold the GRU responsible for the Munich incident, as they did for an earlier attempted drone-explosives attack at Leipzig/Halle airport, which Germany officially blamed on Russia at the start of September, according to the same report.²

Police detained two Bulgarian suspects, a 28-year-old woman and a 38-year-old man, at a nearby petrol station, according to Deutsche Welle. German authorities regard them as recruited, inexperienced low-level operatives, the report said. Rohde & Schwarz works in security and communication technology for government and military clients and, according to Postoj, supplies drones to Ukraine's armed forces; Helsing produces drones, including for Ukraine, according to Deutsche Welle.²¹

As countermeasures, Germany closed the Russian Consulate General in Bonn and the Russian House in Berlin, after which Moscow announced the closure of Goethe-Institut branches and Germany's Consulate General in Saint Petersburg, according to Deutsche Welle. German authorities are also investigating other related incidents, including a drone sighted near a Bundeswehr base close to Hanover, the outlet reported.²

Reported Slovak connection

According to FAZ, cited by Hospodárske noviny and Postoj, the two Bulgarians detained after the Munich attack were part of a group linked to the GRU that is reported to have operated from Slovakia. According to these reports, the same group allegedly plotted to set fire to the Skyeton facility near Prešov—a plant that manufactures surveillance drones for Ukraine—though the scheme was ultimately stopped.³¹

A Latvian and a Ukrainian were reportedly detained in Slovakia and another Latvian was arrested in Hamburg in connection with the foiled Prešov plot, according to The Insider and Česká televize. German investigators are reported to have linked the Munich arson, the Prešov plot and the Leipzig/Halle drone attempt to the GRU, the outlets said. Czech commentator Petr Mlejnek said, "Slovensko mohlo sloužit jako jeden z uzlů širší sítě napojené na ruskou vojenskou rozvědku GRU."⁵⁴

SIS chief's response

Gašpar, writing on social media according to Hospodárske noviny, confirmed that Slovak security services had thwarted an arson attack, describing it as one of the most successful counterintelligence operations in the SIS's history. He said, "Atribúcia podpaľačského útoku, ktorý bol úspešne zmarený činnosťou našich bezpečnostných zložiek a je jednou z najúspešnejších kontrašpionážnych operácií SIS v jej histórii, nie je doposiaľ potvrdená."³

Gašpar said the information had not been confirmed by German security and investigative authorities and stated, "V prípade, že sa atribúcia potvrdí alebo bude možné vylúčiť verziu 'false flag' operácie, bude verejnosť v možnom rozsahu informovaná." He added that police continuously monitor the security situation in Slovakia, cooperate with other security bodies and foreign partners to assess threats, and take the risk of sabotage or arson attacks extremely seriously, with mechanisms in place to respond to potential threats.³¹

Political reaction

Opposition politicians demanded that Prime Minister Robert Fico's government explain the German media reports and called for an extraordinary meeting of the Security Council, according to Postoj and Česká televize. Viliam Karas asked, "ako je možné, že ľudia napojení na ruské spravodajské štruktúry mohli využívať Slovensko ako svoje zázemie," and said, "o takýchto závažných skutočnostiach sa dozvedáme zo zahraničných médií, a nie od slovenskej vlády."¹

Milan Majerský stated, "Úlohou vlády nie je rozhodovať, odkiaľ sa jej bezpečnostná hrozba politicky hodí a odkiaľ nie. Jej úlohou je chrániť Slovensko a jeho občanov." Veronika Remišová described the reports as "mimoriadne vážne informácie," while Tomáš Valášek remarked, "Je absolútne neprijateľné, že informáciu o ruskej stope v atentáte na Slovensku sa dozvedáme z nemeckých novín a nie od predsedu vlády."¹

Wider pattern

Deutsche Welle described the GRU as one of the most effective tools in a hybrid war Moscow conducts against the West, with security services linking the structure to sabotage in Germany, Poland, the Baltic states and other EU countries using explosives, incendiary devices or weapons. Such actions are aimed at logistics routes for military cargo to Ukraine and at pressuring Germany and other European countries to reduce or halt support for Kyiv, according to the outlet.²

According to The Insider, the GRU has been enlisting agents via Telegram and compensating them with cryptocurrency, while several European nations have expelled Russian intelligence officers who were working under diplomatic cover. French President Emmanuel Macron warned that France could experience an attack comparable to the Leipzig episode, and El Mundo reported that U.S. intelligence agencies had recently alerted European governments to a potential Russian drone strike targeting Spain, France, or Italy.⁵