UK Germany cyber defence partnership targets sabotage

The UK and Germany have launched a joint partnership to counter cyber attacks, sabotage and other hybrid threats. Both governments have promised to share information and coordinate action against hostile activity. The UK Germany cyber defence partnership was agreed in Berlin on Thursday 8 October 2026, when Prime Minister Andy Burnham met Chancellor Friedrich Merz for their first face-to-face talks.

It matters beyond Whitehall because the targets named by the government are infrastructure, businesses and democracies.

What the UK Germany partnership changes

The joint statement published by the UK government calls the new arrangement a “Counter Hybrid threat partnership”. It says the two countries “will deepen cooperation in order to prepare for and respond to growing Hybrid threats”. The stated aims are to build democratic and societal resilience, better protect critical national infrastructure, and improve the ability to “monitor, mitigate and counter” such threats.

A separate government announcement gives more detail on method. It says the partnership will involve sharing information and coordinating action to monitor, deter and disrupt threats, and that it will “degrade hostile actors’ capacity to operate in Europe”. The government says the threat comes especially from Russia, but that the two countries will act on hybrid activity “wherever it comes from”.

The BBC explained that hybrid attacks can include cyber attacks, sabotage or misinformation. The published texts do not set out a budget, staffing levels or a date from which joint operations begin. Those details will determine how much changes in practice.

Video: Channel 4 News report on PM Andy Burnham’s Berlin visit to discuss the UK-Germany cyber defence partnership (Channel 4 News / YouTube)

Who is affected: infrastructure, businesses and democracies

The government’s case is that these threats are not abstract. In its announcement, Mr Burnham said: “Attacks on our infrastructure, our businesses and our democracies are not a distant threat. They reach into people’s homes and workplaces, and they are designed to make us weaker and more divided.”

The recent example cited by the sources is Leipzig airport, a major freight hub used to support Ukraine. According to the Evening Standard, a drone carrying explosive was found near Ukrainian cargo planes in August but failed to explode and was defused. Investigators suspect a second drone collided with a cargo aircraft nearby. Last month the UK summoned a senior Russian diplomat over what it called an “egregious and reckless attack”. Moscow denies involvement, and President Vladimir Putin has accused Germany of planting evidence.

The economic link is close. The government says Germany is the UK’s second largest trading partner and contributes some £155 billion to the UK economy, so disruption on either side can reach UK firms and customers. Sir Mark Lyall Grant, a former UK national security adviser, told BBC Radio 4’s Today programme that Russia has been mapping undersea cables in the North Sea, which “affects both the UK and Germany”.

Supporters, critics and the open questions

The sources record support rather than opposition. Mr Burnham told reporters both countries face hybrid attacks “on a regular basis” and that “it makes sense” to take them on together, according to the BBC. Germany’s interior minister, Alexander Dobrindt, said the Leipzig attack followed the “well-established pattern of Russian hybrid operations in Europe”, and that the assumption was Germany would be targeted again, the Evening Standard reported.

Sir Mark described hybrid warfare as falling “somewhere between peace and war”, in a grey zone where Russia has been “extremely active for some time”. He said there had been an intensification in response to European support for Ukraine.

No source reports formal criticism of the partnership itself. The disagreement on record is between governments, since Moscow rejects the accusations. The questions that remain are about detail: how information will be shared, who is accountable, and how success will be measured.

The UK says it is also acting at home. The government says it has already fast-tracked legislation giving the Home Secretary new proscription-like powers to designate state-backed organisations and proxy groups. The Prime Minister has also asked security chiefs to set up a National Centre for Information Defence to detect, attribute and disrupt hostile state information attacks, including deep-fakes.

What happens next and what to do now

The partnership is part of a wider package that followed the formal ratification of the Kensington Treaty, signed in July 2025. The dates below come from the joint statement and the BBC.

The BBC also reported that Mr Burnham is aiming to host the first joint meeting of the UK and German cabinets next year.

Nothing in the announcement asks the public or businesses to do anything new. The following is our own practical advice, not government guidance. Firms that depend on German suppliers or freight routes can check whether their continuity plans cover a delay or outage at a single site. Everyone can treat unverified claims about attacks or outages with caution until official bodies confirm them. The government’s stated concern about deep-fakes and hostile information operations makes that habit more useful.