MK9S · MONTHLY INCIDENT REPORT · MIR-2026-04

Security Situation Europe
April 2026

ICE attack Siegburg, IED attack Munich, pipeline sabotage Serbia, thwarted terror plot Geneva, IS trial Vienna – a month with an exceptionally high threat level throughout the DACH region and Europe.

Reporting period April 1 – April 30, 2026

Report ID MIR-2026-04

Published on April 30, 2026

Classification Public / OSINT

Next issue May 31, 2026

38 Incidents analyzed

12 ATM language.

7 Bomb threats

4 Terrorist incidents

38 Verified sources

Highlight of the Month

ICE Attack: Pyrotechnics and Bomb Threat Siegburg/North Rhine-Westphalia

On April 2, 2026, a 20-year-old perpetrator detonated explosive devices (pyrotechnics) on a fully occupied ICE train between Cologne and Frankfurt, loudly threatening a terror attack. The incident resulted in twelve injuries, a track closure lasting several hours, and a large-scale deployment of the Federal Police. The perpetrator was arrested. Investigations for attempted bodily harm and coercion are ongoing.

12 Injured

1 Arrest

ICE Destination

Tactical Classification

Public transport as a crime scene with maximum victim density and media impact. Pyrotechnics as a means of escalation – low procurement threshold, high psychological impact. Pattern similar to previous lone attacker escalations on European trains (Thalys 2015, ICE 2019).

Operational Assessment

Increased threat level for long-distance trains and train stations. Security managers should review emergency plans for incidents on trains and at stations. Preventive K9 detection recommended for large events and at train stations.

Bomb Threats Germany, Austria & Switzerland – April 2026

Date	Ort	Goal	Result	Status
02.04.	Siegburg (North Rhine-Westphalia)	ICE International train	12 injured, line closure, arrest	ARREST
05.04.	Aachen	Central Station	Evacuation, lockdown, no explosives	False alarm
08.04.	Vienna (AT)	School, 15th District	Cobra/WEGA operation, evacuation, no findings	False alarm
10.04.	Munich	Eclipse Grillbar (Israeli)	IED detonated, property damage, antisemitic motive	DETONATION
11.04.	Hamburg	Falkensteiner Bank	Picric acid discovery, bomb disposal unit, on-site detonation	EXPLOSIVE FIND
14.04.	Geneva (CH)	Public space	Terror prevention, explosive devices seized	Foiling
17.04.	Neuhofen/Krems (AT)	School	Bomb threat, evacuation, nothing found	False alarm

Further incidents April 2026

April 06, 2026 · Serbia

Pipeline Sabotage: Explosives Discovered on Balkan Stream

Serbian security forces discovered explosive devices on the Balkan Stream gas pipeline. Russian authorities warned of Ukrainian sabotage attempts. Highest alert level for critical energy infrastructure in Southeastern Europe.

April 09, 2026 · Vienna (AT)

ISIS terror trial: Taylor Swift concert attack plot

Trial begins against ISIS supporter who planned an attack on the Taylor Swift concert in Vienna. Defendant allegedly procured explosives and weapons. Historic trial for Austrian terror justice.

April 12, 2026 · Wermelskirchen (NRW)

ATM bombing: €180,000 in property damage

Unknown individuals blew up an ATM in Wermelskirchen with explosives. Massive building damage, perpetrators fled with loot towards the Netherlands. Dutch group of perpetrators suspected.

April 15, 2026 · Quedlinburg (ST)

ATM bombing: historic old town affected

Explosion of an ATM in the UNESCO World Heritage town of Quedlinburg. Considerable property damage to the historic building. Perpetrators fled unidentified. BKA coordinating investigations.

April 18, 2026 · Gmunden (AT)

ATM bombing: €365,000 in property damage

Unknown perpetrators blew up an ATM in Gmunden (Upper Austria) with high explosives. Property damage of around €365,000. Perpetrators fled with loot, manhunt is underway.

April 20, 2026 · Aargau (CH)

IS terrorism suspicion: 18-year-old arrested

Swiss Federal Prosecutor's Office arrested an 18-year-old suspected IS supporter in the canton of Aargau. Suspected of planning an attack. House searches yielded incriminating material.

April 22, 2026 · Berlin

Left-wing terrorist attack on power grid

Unknown perpetrators deliberately damaged power infrastructure in Berlin. Investigators suspect a left-wing terrorist background. The Federal Prosecutor's Office has taken over the investigation.

April 25, 2026 · Hagen (North Rhine-Westphalia)

Sabotage agents arrested on A6

Federal Police arrested suspected sabotage agents on the A6. Suspicion of preparing attacks against defense companies and logistics infrastructure on behalf of foreign intelligence services.

April 27, 2026 · Netherlands/DE/CH

Eurojust: 9 Dutch nationals arrested for ATM bombings

Eurojust coordinated arrest of nine Dutch nationals for ATM bombings in Germany and Switzerland. Organized criminal group with cross-border structure.

April 28, 2026 · London (UK)

IS Golders Green Knife Attack: 2 Dead

Islamist attack in Golders Green (London) claimed two lives. UK raised terror alert level to SEVERE. Perpetrator pledged allegiance to the Islamic State. Europol is coordinating the investigation.

Overall operational assessment

Patterns & Trends April 2026

April 2026 shows an extraordinary convergence of various threat types: Islamist terrorism (IS Vienna trial, Geneva foiling, London), politically motivated violence (IED Munich, Berlin power grid), state-sponsored sabotage (Serbian pipeline, A6 agents), and organized crime (12+ ATM bombings). The simultaneity of these threats presents significant resource challenges for security authorities.

Recommendations for Security Officers

Review of emergency plans for bomb threats at train stations, schools, and public buildings. Increased vigilance at Israeli and Jewish facilities (IED patterns Munich). Adapt protection concepts for critical infrastructure (energy, rail). Plan for preventive K9 detection at large events and at train stations as a standard measure.

📄 Report herunterladen (MIR-2026-04) ⬇ PDF Deutsch ⬇ PDF English ⬇ PDF Español

Security Situation EuropeApril 2026