German Police Find Suspicious Object at Third Substation After Four Days of Attacks on RWE Grid
Three incidents in four days have forced lignite-fired units offline in North Rhine-Westphalia, with 4.2 GW of RWE capacity disrupted and no perpetrators named.
German police found a suspicious object at a substation in Dormagen, western Germany, on Friday (2026-09-04), the third apparent act of sabotage in four days targeting electricity infrastructure in North Rhine-Westphalia, German media reported. Montel noted the discovery followed two earlier incidents that had already forced lignite-fired power units offline.5
Energy Voice reported that 4.2 gigawatts of RWE power capacity had been disrupted, a figure compiled before the Dormagen event and likely understating the eventual total. No group has claimed responsibility. German investigators have not publicly identified suspects or stated a motive, and authorities' description of the Dormagen find has been limited to the term "suspicious object."4,5
The sequence began on Tuesday (2026-09-01) evening at Amprion's Rommerskirchen substation in North Rhine-Westphalia. The transmission system operator said connections to power plants had been disrupted, though electricity supplies to end consumers remained unaffected at that point. Amprion said it was investigating the cause as suspected sabotage.3
Rommerskirchen sits in the Rhenish lignite district, where RWE operates some of Germany's largest remaining coal-fired generating stations. The substations in that corridor handle connections between those units and the high-voltage transmission grid. A disrupted plant connection does not immediately sever power to households, but it reduces the dispatchable capacity available on short notice and can push units to trip if the fault is not cleared.4
The two incidents that followed Rommerskirchen were more operationally disruptive. Unlike the first attack, where downstream electricity supply remained intact, those events forced lignite units fully offline, Montel reported. What distinguishes the targeting at the second and third sites from the first has not been publicly explained.5,3
Energy Voice also noted the Rommerskirchen incident came "shortly after another site was disrupted," implying the attacks may predate Tuesday (2026-09-01). If the timeline extends beyond the three publicly confirmed incidents, the investigation covers more ground than current disclosures indicate.4
Germany is not the only European country to face suspected deliberate attacks on energy infrastructure in 2026. On Monday (2026-05-18), Italian TSO Terna confirmed to Montel that unknown actors had targeted the Transalpine Pipeline, an oil artery connecting Trieste to refineries in Austria and Germany. Energy experts told Montel at the time that the incident exposed broad vulnerabilities across European energy systems.1
The scale of planned European grid investment points to what is exposed. TenneT, the largest TSO by coverage area in Germany, plans to spend €200 billion on infrastructure by 2034, according to The Economist. ENTSO-E, the European TSO regulator, estimates the total required across the European Union to reach 2050 electrification targets at €800 billion. Amprion's substation network in the Rhine-Ruhr industrial corridor, serving one of Europe's densest concentrations of heavy industry and baseload generation, is integral to that effort.2
The immediate question for power traders is how much RWE lignite capacity remains offline before Monday's (2026-09-07) market open. German power futures stood at €149.68 per megawatt-hour with European markets closed on Sunday (2026-09-06). Three attacks on the same regional grid in four days, with no perpetrators identified and investigators still working from physical evidence, offers little prospect of quick resolution.5,4