Germany's recent power-grid incidents are becoming an infrastructure problem as well as a criminal investigation. RWE said an incident near an Amprion substation on the evening of 1 September caused five lignite units at Neurath and Niederaußem, representing 4,200 MW of installed capacity, to leave the grid. The units had been supplying about 3,000 MW immediately before the incident.
Two days later, police informed RWE that launch devices had been found near a substation by Dormagen and high-voltage overhead lines owned by RWE Power. RWE said the second finding had no effect on power-station operations, but that it had strengthened security measures in coordination with Amprion and the authorities.
A 4.2 GW interruption shows the leverage of physical bottlenecks
The useful number from the Rhenish incident is not simply 4,200 MW. It is the difference between the size of the generation fleet affected and the relatively concentrated infrastructure through which that capacity reaches the grid. Five large units can be operational assets while still depending on a smaller number of substations and transmission connections.
Germany's grid remained stable and RWE began returning units to service, so the event did not become a wider supply crisis. Even so, it demonstrates why resilience planning cannot focus only on whether enough generation capacity exists. Physical connection points, control systems, transformers and transmission lines can determine whether that capacity is actually available when needed.
Police are investigating a series of incidents, but attribution remains unresolved
Brandenburg police said devices were found after suspected damage to an overhead line at the Turnow-Preilack substation on 1 September. Investigators opened proceedings covering suspected disruption of public operations, an explosives offence, destruction of important equipment and the formation of a terrorist organisation. Police later said the authenticity of a claim of responsibility remained under investigation.
On 4 September, Brandenburg police said investigations and police operations were under way in connection with sabotage at substations in Brandenburg, Rheidt, Dormagen and Weisweiler. That is evidence of an active multi-site investigation, not proof that every incident had the same perpetrator, motive or command structure. Reporting should keep those questions open until investigators establish them.
Security spending is becoming part of the grid investment case
For utilities and transmission operators, repeated physical threats change the cost base. More patrols, surveillance, access controls, hardened equipment, redundancy and coordination with law enforcement all consume money and management attention. The value of those measures is difficult to measure precisely because successful security often appears as an incident that never happens.
The investment challenge is therefore to protect high-consequence assets without turning every kilometre of network into a fortress. Germany already faces a large grid-expansion programme driven by renewables, electrification and regional power imbalances. Security requirements now have to be designed into that build-out rather than treated as an afterthought once assets are operating.
Our view: resilience should now be treated as productive infrastructure
German Business Review's view is that Germany has been too comfortable separating infrastructure investment from infrastructure security. A substation or line that is cheap to build but easy to disable is not genuinely cheap. Reliability, redundancy and physical protection are part of the economic value of the asset.
That does not justify unlimited security budgets or vague emergency powers. Operators should have clear standards, regulators should demand evidence that spending reduces identifiable risks, and criminal attribution should remain with investigators rather than political speculation. But after a single incident temporarily removed 4.2 GW of RWE capacity, treating physical resilience as a secondary cost is no longer credible.
| Incident | Confirmed operational effect | Current status |
|---|---|---|
| Rhenish/Amprion substation area, 1 September | Five RWE units with 4,200 MW capacity left the grid; about 3,000 MW had been generating | Units were scheduled to return progressively; investigations continued |
| Turnow-Preilack, Brandenburg, 1 September | Police found devices after suspected damage to an overhead line; no effects on the public were reported | LKA investigation; claimed responsibility not authenticated at the time of police update |
| Dormagen area, 3 September | RWE said no effect on power-station operations | Security measures strengthened; police investigation ongoing |
Frequently asked questions
Did the September German grid incident cause a blackout?
No nationwide blackout was reported. RWE said five lignite units with 4,200 MW of combined capacity left the grid after the 1 September incident, while the wider grid remained stable.
Were all recent German grid incidents carried out by the same group?
Authorities are investigating several incidents, but the available official statements do not establish that all of them had the same perpetrator, motive or command structure.
Was RWE's Dormagen power generation interrupted?
RWE said the launch devices found near the Dormagen-area substation and high-voltage lines had no effect on its power-station operations. The company said it nevertheless strengthened security measures.