Germany's digital minister, Karsten Wildberger, has confirmed that Apple sent threat notifications to members of the Bundestag and the federal government, warning that their iPhones may have been targeted by mercenary spyware. The alerts, which began arriving on 29 October, were first reported by the public broadcaster ARD.
Speaking on ARD's Bericht aus Berlin on Sunday, Wildberger said there had been "a notification from Apple that certain devices may have been compromised with so-called spyware." He did not specify how many politicians were affected or who they were, but stressed that the Federal Office for Information Security (BSI) had reacted "super quickly" and had written to everyone concerned with guidance.
What do the alerts say?
Apple's threat notifications are sent when the company believes a user has been individually targeted by mercenary spyware — software that Apple describes as "vastly more sophisticated than regular cybercriminal activity." The warnings appear on the iPhone's lock screen, in the settings menu, and are also sent by email. Apple notes that such spyware is harder to detect and prevent, but that the vast majority of users will never be targeted.
According to the BSI, this type of spyware can give attackers access to messages, including those sent on encrypted apps, as well as to calls, contacts, calendars, and location data. It can also switch on a phone's microphone and camera, effectively turning the device into a surveillance tool.
The BSI's letter, seen by Wildberger, advised those affected to assume — as a precaution — that their device may have been compromised, because the alerts do not indicate whether an attack actually succeeded. This means that even if no evidence of infection is found, the phones should be treated as potentially unsafe.
The identity of the attackers remains unknown. Wildberger declined to speculate, but the incident comes amid heightened concerns about cyber-espionage targeting European politicians. Earlier this year, Germany's domestic intelligence warned of increased activity by foreign actors seeking to influence political processes.
The news also follows a broader pattern of spyware scandals across Europe. In recent years, several EU member states have been hit by similar attacks, often linked to commercial surveillance software such as Pegasus. The European Parliament has launched inquiries into the use of such tools, and the European Commission has proposed new rules to curb their abuse.
For German officials, the immediate priority is damage control. The BSI has urged all recipients to follow its security recommendations, which include restarting the device, updating to the latest iOS version, and avoiding sensitive communications until the threat is fully assessed.
Wildberger praised the BSI's swift response, but also acknowledged the limits of what can be done. "We have to assume that the attackers are very professional," he said. "This is not a simple phishing attempt."
The incident underscores the growing vulnerability of political elites to digital espionage. As Germany deepens its economic-security ties with partners like Japan, the need for robust cyber defenses becomes ever more critical.
While the full scope of the attack is still unclear, the episode serves as a stark reminder that even the most secure devices can be compromised by determined adversaries. For now, German politicians are left to wonder who targeted them — and what they may have lost.
