RISI

← News

Updated 2026-06-29

Deutsche Bahn GSM-R failure halts all German rail services for two hours

A software fault during a scheduled maintenance window on June 23 knocked out the GSM-R radio system that coordinates German train operations, halting every long-distance, regional, and commuter service across the 33,400 km network for approximately two hours. German security authorities ruled out sabotage and cyberattack; the cause was an accidental software defect compounded by a failure of automatic redundancy.

At approximately 22:30 CET on June 23, 2026, Deutsche Bahn’s GSM-R digital railway radio system failed nationwide, halting every long-distance, regional, and S-Bahn commuter train across Germany’s 33,400 km network. GSM-R (Global System for Mobile Communications–Railway) is the dedicated 2G radio standard that enables voice coordination between train drivers and traffic control centers, carries operational data, and interfaces with the ETCS (European Train Control System) cab-signaling layer. Without it, Deutsche Bahn’s operating rules do not permit safe train movement. Engineers identified and resolved the fault within approximately 90 minutes, with services resuming before 01:00 CET on June 24.

Philipp Nagl, head of DB InfraGO (Deutsche Bahn’s infrastructure subsidiary), attributed the failure to a chain of three linked weaknesses: a scheduled replacement of a technical component in the GSM-R network triggered a software fault that produced no clear error message, and the system’s automatic redundancy mechanism then failed to engage without manual intervention. No details about the specific component or software module have been published; DB InfraGO announced a full root-cause analysis, but no findings had been released as of June 28. German federal security authorities investigated and confirmed there was no external cause — no cyberattack, no sabotage. The investigation conclusion is consistent with the reported maintenance context: the failure began during a planned window rather than during normal unattended operation.

The incident is notable as an OT process-control failure — the largest GSM-R outage in European rail history by network coverage — and follows a pattern RISI has tracked since the 1990s of software and control-system faults halting critical transport infrastructure without any malicious actor involved. It also puts a sharp point on the transition urgency for European rail operators. GSM-R is a 25-year-old 2G system operating on spectrum that will eventually be reallocated. Deutsche Bahn and its European counterparts are moving toward FRMCS (Future Railway Mobile Communications System), the 4G/5G successor standard, but Deutsche Bahn has no published date for full national cutover. Until that transition completes, the centralized GSM-R architecture remains a single point of failure for the entire national rail network — a risk this incident quantified at 5.4 million affected passenger journeys.

Sources