Initially, the leak was attributed to APT28, a group tied to Russia's GRU army intelligence directorate. Germany's domestic intelligence agency Federal Office for the Protection of the Constitution Chief, Hans-Georg Maassen, stated sabotage by Russian intelligence was a current threat to German information security.