Why was Berlin not better prepared for this attack? | DW News

Berlin Power Outage: A Detailed Summary

Key Concepts:

• Vulcan Group (Wulcan Group/WAN Group): A far-left anarchist extremist group responsible for multiple attacks on critical infrastructure in Germany.
• Critical Infrastructure: Systems and assets essential for the functioning of a society and economy, including power grids, transportation, and communication networks.
• Arson Attack: Intentional setting of fire to property, suspected in this case as the cause of the power outage.
• Anarchist Extremism: A political ideology advocating the abolition of all forms of government and hierarchical social structures, often employing violent tactics.
• MO (Modus Operandi): The method of operation of a criminal or extremist group.

1. Incident Overview & Initial Response

A major power outage struck southwestern Berlin early Saturday morning, affecting approximately 50,000 households. Residents faced freezing temperatures and disrupted services, including mobile phone connectivity and heating. The outage is expected to last several days, with initial estimates suggesting a 5-day restoration timeframe, though some experts believe it could take longer. Berlin’s mayor attributes the incident to left-wing political extremists. Police are investigating as a suspected arson attack and consider a letter claiming responsibility from a known extremist group to be credible. The fire damaged several cables near a power station in Liftoff, one of the affected neighborhoods. Initial assessments from partner companies suggested weeks for repair, but efforts are underway to expedite the process to within 5 days.

2. The Vulcan Group: Identity, Motivation & History

The extremist group suspected of the attack is identified as the Vulcan Group (also referred to as Wulcan Group and WAN Group). Founded around 2011, the group operates within the anarchist left-wing extremist spectrum. Han Jacob Schindler, Senior Director of the Counter Extremism Project, details their history of attacks on critical infrastructure, including:

• Train systems (2011-2015)
• Tesla factory in Brandenburg (2021 & 2024)
• A technology park in Atlas Golf, causing another electricity grid disruption.

The group is described as a loose network of individuals with identifiable leadership, evidenced by consistently formatted letters claiming responsibility under varying names. Their ideology centers on the destruction of all state structures, viewing them as inherently violent. They oppose modern technology, including AI, and aim to dismantle the state to build a more "egalitarian" society – paradoxically, one that Schindler characterizes as potentially totalitarian. Schindler states, “what happened last night really is in the classical definition a terrorist attack.”

3. Vulnerabilities in Critical Infrastructure Security

The incident highlights vulnerabilities in the security of Germany’s critical infrastructure. Several factors contribute to this:

• Active Extremist Presence: Berlin and Brandenburg have a significant and active left-wing extremist milieu, providing a support network for extremist groups. The authorities previously allowed a member of the Red Army Faction to remain hidden for decades within Berlin.
• Publicly Available Information: Details of large infrastructure projects, including technical plans and maps, are often publicly available due to transparency requirements in democratic societies. This allows individuals to research potential targets without needing to physically infiltrate facilities. Felix Noman, an extremism and counterterrorism expert, emphasizes this point, stating that “if you know where to look you can research online without actually having to go into any offices and break…steal any plans.”
• Professional Execution: Noman suggests the attack was carried out by professionals, requiring expertise in information gathering, infrastructure targeting, and concealment.

4. Resident Experiences & Community Response

DW reporter Lars Halter, a resident of southwestern Berlin, described the immediate impact of the outage. He recounted the need to prepare for the situation by acquiring flashlights and power banks. He observed traffic disruptions due to non-functioning traffic lights and icy conditions. Halter highlighted the importance of neighborly networks for information sharing and mutual support, with residents offering access to showers and warm meals. He noted the uncertainty surrounding the restoration timeline, with authorities initially estimating completion by Thursday. He described a family of four relying on neighbors for basic necessities.

5. Government Response & Future Preparedness

The German government recently enacted a new law at the end of last year aimed at enhancing the security of critical infrastructure. This law introduces new implementation requirements for large companies operating in critical sectors. The goal is to improve preparedness for attacks not only from far-left groups but also from potential state actors like Russia. Noman emphasizes that the attack requires a professional level of planning and execution, involving information gathering, infrastructure targeting, and concealment.

6. Technical Aspects of the Attack

The attack involved a fire that damaged several cables near a power station in Liftoff. The specific method used to initiate the fire remains under investigation, but the incident is classified as a suspected arson attack. The damage is significant enough to require extensive repairs, initially estimated to take weeks, but now targeted for completion within 5 days.

7. Data & Statistics

• Affected Households: Approximately 50,000
• Group Founding: Vulcan Group founded around 2011
• Previous Attacks: Multiple attacks by the Vulcan Group since 2011, including two on the Tesla factory in 2021 and 2024.

Conclusion:

The Berlin power outage represents a serious security breach and a concerning escalation of extremist activity targeting critical infrastructure. The incident underscores the vulnerabilities inherent in publicly accessible infrastructure information and the need for enhanced security measures. The response highlights the importance of community resilience and neighborly support in times of crisis. While the German government is taking steps to improve infrastructure security, the incident serves as a stark reminder of the ongoing threat posed by extremist groups and the need for continued vigilance and proactive countermeasures. The professional nature of the attack suggests a sophisticated and determined adversary, requiring a comprehensive and coordinated response from law enforcement and security agencies.