Germany’s Bundeswehr grounded drones made by Quantum Systems after attackers placed a malicious file on the company’s server for QBase software updates, the Financial Times and Der Spiegel reported on November 12, 2026, according to DroneXL. Quantum Systems confirmed a cyberattack that evening and said it discovered the intrusion at the end of October.

What was reported

  • According to Der Spiegel, attackers got into Quantum Systems’ network and left malware on an internal server that distributes QBase updates, disguised as a routine release. QBase is the mission-planning ground software for the company’s Vector reconnaissance drone, which the Bundeswehr calls Falke.
  • Spiegel reported that the malware reached servers at the Bundeswehr and other customers but not the drones themselves, that a check caught it, and that the fleet was grounded for a time. It said Germany’s military counterintelligence service, its domestic intelligence agency and its federal cybersecurity office are investigating, DroneXL reports.
  • Two sources told the FT that the Bundeswehr acted as a precaution and that the grounding kept Quantum Systems out of a recent military exercise. The FT lists Germany, Spain and the Netherlands as military customers.
  • Handelsblatt, citing the company, reported a flight ban inside Germany while the fleet outside Germany continues to fly.

What the company and ministry said

  • Quantum Systems said it was targeted “precisely because our work is critically relevant to customers’ security,” according to DroneXL. It said its IT and security teams contained the threat with the authorities, that operating its drones carries no risk for users and that its fleet is in service. It referred only to “hostile actors” and named no suspect.
  • Germany’s Defense Ministry told the FT that it “does not discuss the readiness of military equipment,” and declined to comment to dpa-AFX. The Bundeswehr did not immediately respond to the FT.

Accounts that differ

The reports differ on scope and timing: DroneXL’s summary describes a full grounding, Spiegel describes the whole fleet grounded for a time last month, and Handelsblatt describes a ban inside Germany only. No source Lens read says what the malware was designed to do, how many aircraft were affected, which other customers received the file, whether data left the network or who carried out the attack.

Sources and notes

This post is based on DroneXL’s article of November 12, 2026, which relays reporting by the Financial Times, Der Spiegel, Handelsblatt and dpa-AFX. Those outlets are paywalled and Lens did not read them; DroneXL says it read only agency summaries of Spiegel. Lens did not read a Quantum Systems statement directly and did not contact the company, the Bundeswehr or the Defense Ministry. See Lens’s earlier post on Quantum Systems’ Series D.

Image: a Romanian Army Quantum Systems Vector drone during the Eastern Phoenix 2026 exercise, courtesy of Natochannel, public domain, via Wikimedia Commons. The aircraft shown is not a Bundeswehr Falke.