A hacked software update grounded Quantum Systems' drones in the German military
What happened? Germany's Bundeswehr grounded drones made by Quantum Systems, the Bavarian defence start-up valued at €7bn in a funding round this year, as a precaution after a cyber attack on the company, the Financial Times reported on 12 November. According to a person familiar with the matter, a malicious file disguised as an update was distributed through the server that sends updates for QBase, Quantum's ground-control and mission-planning software. Two people told the FT the grounding kept Quantum out of a recent military exercise.
What the company says: Quantum Systems says it found the incident at the end of October, describes it as "an active cyberattack by hostile actors", and says it contained the threat with the authorities, with no risk to people operating its drones. In an emailed statement on 13 November, a spokesperson said the fleet is flying normally everywhere, including with the Bundeswehr, and that the German military was the only customer to ground its systems.
Reported, not confirmed: Der Spiegel reports that the file reached servers at the Bundeswehr and other customers but was caught in a check before it got to any aircraft, and that military counterintelligence (MAD), the BfV and the BSI are investigating. Accounts differ on how many drones were grounded and for how long. Germany's defence ministry does not comment on equipment readiness, no attacker has been named, and it is not known whether Quantum's Ukrainian operations, with more than 200 staff and three joint ventures, were affected.
Why it matters: Software-defined drones are sold on frequent updates. This case shows the update channel itself is an attack surface: one compromised server can reach every customer at once, and a cautious military customer will stop flying until it is sure. Expect supply-chain security to weigh more in European defence procurement and in due diligence on defence-tech rounds.
