Nord Stream Trial: How German Police Traced Evidence to Ukraine

Key Points

• Serhii Kuznetsov, identified under German privacy rules as Serhii K, is due to face trial in Hamburg over his alleged role in the September 2022 explosions that damaged the Nord Stream gas pipelines beneath the Baltic Sea.
• German prosecutors accuse him of causing an explosion and committing a war crime by allegedly attacking civilian infrastructure on behalf of Ukrainian state agencies. He and Ukraine have denied involvement.
• Investigators suspect that a team of divers used a rented yacht, the Andromeda, to transport explosives and carry out the underwater operation.
• The explosions ruptured the Nord Stream 1 and Nord Stream 2 pipelines, which have remained inoperable since the incident.
• Investigators reportedly examined evidence associated with the yacht, including DNA traces allegedly left by members of the suspected team.
• Initial public and political speculation focused on possible Russian responsibility, partly because of Moscow’s history of using energy supplies as a source of political leverage and its alleged involvement in hybrid operations.
• The prosecution’s allegations remain to be tested in court. An indictment or arrest does not establish criminal guilt.
• The case has implications for European energy security, the protection of critical infrastructure, German-Ukrainian relations and the investigation of attacks in international waters.

The supplied report ends before the full account of the investigation. The article below distinguishes the allegations in the supplied material from established events and does not invent missing statements or attribute quotations to journalists whose names have not been provided.

Germany Latest News (GLN) October 10, 2026 – Germany is preparing to put Ukrainian national Serhii K. on trial over the 2022 explosions that disabled the Nord Stream gas pipelines beneath the Baltic Sea. Prosecutors allege that he coordinated a team responsible for placing explosives on critical energy infrastructure, using a rented sailing yacht. Investigators say travel records, digital evidence and other findings helped identify the suspect after a lengthy cross-border investigation. The defendant denies involvement, and the allegations against him remain subject to judicial examination as the case approaches its opening hearing.

The report follows the inverted-pyramid structure, placing the principal development, charges and defence position first, followed by the investigation, the pipeline explosions and their wider context.

What is the Nord Stream trial about?

The trial of Serhii K. is scheduled to begin at the Hanseatic Higher Regional Court in Hamburg on 14 October 2026, nearly four years after explosions damaged the Nord Stream gas pipelines in the Baltic Sea. The case represents a significant development in Germany’s investigation into the destruction of infrastructure that had carried Russian natural gas towards Europe.

According to the Hamburg court’s announcement of 2 September, the judges admitted the indictment and opened the main proceedings. The court listed 16 hearing dates between 14 October and 17 December 2026, with further sessions expected in January and February 2027.

As reported by Reuters journalist Kirsti Knolle on 1 July 2026, German prosecutors had indicted the Ukrainian national over the pipeline explosions. Reuters said the prosecution suspected him of helping coordinate a team that used the sailing yacht Andromeda to place explosive devices on the pipelines near Denmark’s Bornholm island. The defendant has denied involvement.

Under German privacy rules, the defendant is publicly identified in court reporting as Serhii K. He was identified as Serhii Kuznetsov in earlier extradition proceedings, although other reporting has described the use of an alleged alternative identity during the investigation.

The prosecution alleges that he led or coordinated the operation. It does not mean the court has established that he committed the offences. The trial will examine the evidence, the prosecution’s account of the operation and the defence’s objections.

What charges does Serhii K. face in Germany?

German prosecutors have brought charges relating to an alleged war crime involving an attack on civilian objects, causing an explosion and destroying structures. The proceedings also concern the alleged disruption of public services.

The Hamburg court said its preliminary assessment of the evidence gave it sufficient grounds to suspect the defendant’s involvement as a co-perpetrator. That decision allowed the case to proceed to trial; it was not a finding of guilt.

According to Reuters, the prosecution’s case centres on the allegation that Serhii K. coordinated a team responsible for placing explosives on the Nord Stream pipelines. Prosecutors have argued that the operation was carried out on behalf of Ukrainian state agencies, an allegation with potentially significant political implications that remains contested.

The legal questions extend beyond whether the defendant was involved in the operation. The court must consider the applicable criminal offences, the evidence connecting him to the explosions and the circumstances surrounding the alleged attack on civilian energy infrastructure.

The defence disputes the prosecution’s account. As reported by Germany’s ARD public broadcaster and its investigative partners NDR, WDR and other regional broadcasters on 8 October, defence lawyer Jens Meyer-Lohkamp said the investigation had not produced direct, compelling evidence of his client’s involvement. The lawyer also raised questions about whether the pipelines could lawfully have continued operating during Russia’s war against Ukraine.

Those arguments will have to be assessed through the proceedings. The defendant’s status as a former Ukrainian military officer does not, by itself, establish criminal responsibility or settle the legal status of the alleged operation.

How did German investigators trace the suspected operation to Ukraine?

The investigation involved German federal police and criminal investigators working over an extended period to reconstruct the movements of the suspected team and identify those allegedly involved.

In its investigative report published on 8 October, ARD’s Tagesschau, drawing on reporting by journalists from NDR, WDR, RBB and other public broadcasters, described how photographs taken by tourists at Baltic Sea ports and traffic-camera images helped investigators identify vehicles believed to have transported members of the team to and from the coast.

Investigators then examined records of vehicle occupants collected during border checks in Poland. According to the report, the group allegedly travelled using false passports, complicating the identification process. A passport image associated with the name Serhii Kulinich was reportedly matched to the defendant. The indictment described the identification as particularly strong.

The significance of this evidence is that the investigation did not rely on a single alleged clue. Instead, investigators attempted to connect the suspected participants, their movements, the vessel and other material into a consistent account of the operation.

The prosecution’s evidence must nevertheless be distinguished from independently established facts. The identification findings reported by investigators have not yet been tested through the full trial process.

What role did the yacht Andromeda allegedly play?

According to the indictment details reported by ARD and its investigative partners, the suspected team chartered the sailing yacht Andromeda in Rostock-Warnemünde for several weeks at a reported cost of approximately €12,000.

The alleged operation involved a coordinator, a skipper, a military engineer or specialist, and civilian divers. Investigators believe the vessel was used to transport the team and equipment associated with the underwater mission.

Reuters reported in July that prosecutors suspected Serhii K. of acting as the operation’s coordinator and team leader aboard the yacht rather than as one of the divers or as an explosives expert.

The distinction is relevant to the prosecution’s case because an alleged coordinator could face responsibility for directing or participating in an operation even if he did not personally attach the explosives. Whether the evidence proves that role is a matter for the court.

The yacht has therefore become a central part of the investigation’s reconstruction of the alleged mission, including the movements of the suspected participants and the equipment they may have used.

What digital evidence have investigators reportedly examined?

The ARD investigative report said that investigators examined data recovered from the defendant’s mobile phone after his arrest. According to the report, the material included searches concerning the Baltic Sea and the Nord Stream pipelines, including water depths, geographical coordinates, maritime economic zones and technical information about the pipelines.

The report also said that a Garmin sports watch associated with the defendant had no recorded data during the September 2022 period when the alleged team was travelling aboard the Andromeda. The significance of that absence is not self-evident: the court would need to assess what the device recorded, how it was used and whether the missing data supports any particular conclusion.

Investigators reportedly examined DNA traces that they believed could connect members of the suspected team to the yacht. The supplied account identifies these traces as one element of the investigation, but the precise evidential weight of individual samples must be established through the underlying forensic findings and court proceedings.

Taken together, the reported material indicates that the prosecution intends to present a case built from several types of evidence, including travel records, identity documents, digital information and forensic findings. The defence will have an opportunity to challenge the interpretation, reliability and relevance of that material.

When and how was Serhii K. arrested?

The investigation eventually led German authorities to pursue the suspect outside Germany. According to Reuters, Serhii K. was arrested in Italy in August 2025 and transferred to Germany in November that year after extradition proceedings.

The circumstances of his arrest were described in the BBC report, “Nord Stream trial: How German police followed the evidence – to Ukraine”, published on 10 October 2026. The report describes how the suspect was staying at a holiday resort near Italy’s Adriatic coast with his wife and young children when police located him.

According to that account, the German investigation had progressed to the point where authorities could act on information identifying him. His arrest brought the case into a new phase, moving it from a complex international investigation towards criminal proceedings in Germany.

The arrest did not establish his guilt. It enabled German authorities to pursue the charges through the judicial process, subject to the applicable extradition rules and his rights as an accused person.

The case also illustrates the importance of cooperation between European law-enforcement authorities when suspects are believed to have travelled across several countries. Investigators must establish identities, obtain relevant records and comply with legal procedures in each jurisdiction.

What did intercepted telephone conversations reportedly reveal?

A report published by ARD’s Tagesschau on 8 October described telephone conversations between Serhii K. and his wife while he was being held in Italy pending extradition.

According to the report, the conversations were intercepted by Italian authorities and later included in material cited by the German prosecution. In one conversation, the suspect reportedly discussed the possibility of issuing a public statement describing the pipeline destruction as an official military operation. He also reportedly expressed frustration at what he perceived as a lack of support from Ukraine.

The report said the conversations formed part of the evidence cited in the indictment. Their significance will depend on the full context, the precise wording and the interpretation presented to the court.

The prosecution may rely on such communications to support its account of the suspect’s knowledge of, or relationship to, the alleged operation. The defence, in turn, may challenge the conclusions drawn from the conversations or argue that they do not establish the offences charged.

It would be premature to treat reported comments as proof that the Ukrainian state ordered the sabotage. The court must assess the evidence against the individual defendant, while any broader allegations concerning government or military involvement require their own substantiation.

What happened to the Nord Stream pipelines in September 2022?

The explosions took place on 26 September 2022, when multiple blasts damaged the Nord Stream pipeline system beneath the Baltic Sea.

At approximately 02:03, the first explosion ruptured part of the infrastructure, releasing large quantities of gas into the sea. Further explosions damaged additional sections of the network. The incidents affected three of the four pipelines associated with Nord Stream 1 and Nord Stream 2, according to reporting on the investigation.

Nord Stream 1 had been an important route for Russian natural gas supplies to Germany. Nord Stream 2 had been constructed but had not entered commercial operation. The explosions left the damaged pipeline sections inoperable.

The alleged method involved placing explosive devices on pipelines at substantial underwater depths. According to the prosecution account reported by ARD, six explosive devices were placed on three pipelines, with timers used to detonate them. Investigators believe the Andromeda was involved in the operation. These details form part of the prosecution’s reconstruction rather than a final judicial determination of what happened.

The damage had consequences beyond the immediate physical destruction. The pipelines were significant components of the European energy system, and their loss came during a period of severe tension over Russian gas supplies following Russia’s full-scale invasion of Ukraine in February 2022.

Reuters reported that the explosions disabled important routes for Russian gas to Europe and deepened an energy crisis that had particularly affected Germany.

The incident also raised questions about the security of offshore infrastructure. Pipelines, electricity interconnectors and communications cables can cross maritime boundaries and operate in locations that are difficult to monitor continuously. Investigating damage in such environments can require specialised underwater examination, forensic analysis and cooperation between several countries.

Why did early suspicion focus on Russia?

In the immediate aftermath of the explosions, public discussion and political speculation frequently focused on Russia. The supplied report notes that Russia’s history of using energy supplies as a means of political pressure and allegations of hybrid operations contributed to that early focus.

However, suspicion was not equivalent to proof. The initial public debate took place before investigators had completed the work needed to establish who had carried out the explosions.

The later German investigation developed a different line of inquiry, concentrating on the alleged use of a sailing yacht and a team connected to Ukraine. The indictment against Serhii K. represents a formal step in that investigation, but it does not establish that Ukraine’s government ordered the attack.

Reuters reported that both Russia and Western countries described the pipeline explosions as sabotage. The case has since become a major legal and political issue because the suspected operation concerns infrastructure linking Russia and Germany, while the defendant is a Ukrainian national.

The distinction between individual responsibility and state responsibility is particularly important. Evidence that a person took part in an operation would not, by itself, settle who authorised it, whether senior officials knew about it or whether any government directed it.

Those questions require separate evidence. The Hamburg proceedings will focus on the criminal charges before the court and the evidence admissible in that case.

Is another suspect linked to the Nord Stream investigation?

Yes. The investigation has extended beyond the defendant due to stand trial in Hamburg.

According to ARD’s investigative report on 8 October, another Ukrainian national, identified as Vladimir Z., was arrested in Croatia in August 2026. The report said a Croatian court ruled in late September that he could be extradited to Germany, although his lawyer indicated that the decision would be challenged.

German prosecutors reportedly suspect Vladimir Z. of having participated in the operation as a diver. His case is separate from the proceedings against Serhii K., and his reported arrest does not establish his guilt.

The developments indicate that investigators are continuing to pursue additional individuals allegedly connected to the pipeline explosions. Each person’s responsibility must be established through the relevant legal process.

The possibility of further proceedings also means that the wider investigation may continue beyond the initial Hamburg trial. The court’s scheduled hearings for Serhii K. will not necessarily resolve every outstanding question about the operation or the identities and roles of all those suspected of involvement.

What could the trial mean for European energy security?

The trial places the protection of critical infrastructure back at the centre of European security discussions. The Nord Stream explosions demonstrated how an attack on offshore energy facilities can have consequences for international trade, energy supply arrangements and diplomatic relations.

For European governments, the case raises questions about monitoring infrastructure located far from shore, coordinating investigations across borders and preserving evidence from underwater crime scenes. It also highlights the importance of establishing facts before assigning responsibility for attacks with international implications.

Germany’s legal proceedings may help clarify the alleged operational chain behind the explosions. They could also provide a public examination of how investigators used vehicle records, identity documents, digital data and forensic evidence to identify suspects.

Nevertheless, the trial of one defendant cannot automatically answer every question about the wider operation. Establishing individual criminal liability is different from proving the involvement of a state or determining whether political or military officials authorised an attack.

The outcome will therefore be relevant to legal authorities, infrastructure operators, energy companies and European governments, but any conclusions should remain tied to what the evidence establishes.

Background: Why were the Nord Stream pipelines important?

Nord Stream 1 and Nord Stream 2 were designed to transport natural gas from Russia to Germany through pipelines beneath the Baltic Sea. Nord Stream 1 had carried substantial quantities of Russian gas into the European market, while Nord Stream 2 was completed but never entered commercial operation.

Their importance extended beyond the physical infrastructure. Russian gas had played a major role in Germany’s energy system, and the relationship between Moscow and European energy consumers became increasingly contentious after Russia launched its full-scale invasion of Ukraine in February 2022.

The explosions occurred against that background of political tension and energy-market disruption. They caused extensive damage to the pipeline system and prompted investigations by authorities in several European countries.

Germany’s subsequent criminal investigation sought to determine who had carried out the operation and whether identifiable individuals could be prosecuted. The indictment against Serhii K. and the Hamburg court’s decision to open proceedings mark a significant stage in that effort.

The case also underlines the difference between a suspected explanation and a legally established account. Although investigators have presented allegations about the yacht, the suspected team and the use of explosives, the defendant retains the right to challenge the prosecution’s evidence.

Prediction: How could the trial affect European energy consumers and businesses?

The immediate impact on European energy consumers and businesses is likely to depend more on wider energy-market conditions and government policy than on the opening of the criminal proceedings alone. The trial will not, by itself, restore the damaged pipelines or guarantee any change in gas supplies.

For energy companies and infrastructure operators, the case may provide further information about the methods allegedly used in the attack and the challenges investigators faced in reconstructing the operation. Any verified findings relevant to infrastructure protection could inform future security planning.

For European governments, the proceedings may influence discussions about the security of offshore pipelines, undersea cables and other strategic assets. The case could also affect diplomatic debate concerning Ukraine, Russia and responsibility for attacks on civilian infrastructure, although those consequences will depend on the evidence and the wider political context.

For businesses and households, the key distinction is between the legal outcome and changes to the energy system. A conviction would establish criminal responsibility only to the extent determined by the court; it would not automatically resolve the broader questions surrounding state involvement or future gas supplies.