Bergheim, Germany — German authorities have opened an investigation after a disruption at an electricity substation near Cologne was identified as a suspected deliberate criminal act rather than a technical malfunction.

The incident occurred Tuesday evening at a substation in Rheidt, a district of Bergheim in North Rhine-Westphalia. Police were called to the facility at around 8 p.m. after a technical disturbance was reported.

Investigators found that a short circuit had caused several electrical lines to go offline. However, authorities said there was no evidence at this stage that the incident was caused by an ordinary equipment failure. Police are treating it as an intentional act and are working to determine who was responsible and why the facility was targeted.

The substation is operated by German transmission network company Amprion. The company said external interference was considered highly likely, while the country’s electricity supply and overall grid stability remained intact.

The incident nevertheless had significant consequences for nearby power-generation infrastructure. According to RWE, five lignite-fired power units with a combined capacity of approximately 4,200 megawatts were temporarily taken offline following the disruption. Authorities said electricity supplies to the public were not interrupted.

Police are now examining whether the Bergheim incident could be connected to another suspected attack on Germany’s electricity infrastructure in Brandenburg earlier on Tuesday.

In that separate case, unknown individuals allegedly attempted to create short circuits on high-voltage lines near the Jänschwalde power plant. Brandenburg authorities have launched a criminal investigation that includes possible terrorism-related offenses.

Officials have cautioned against prematurely identifying the perpetrators. Investigators are reportedly considering multiple possibilities, including politically motivated extremism and possible involvement by foreign actors. No suspect has been publicly identified, and authorities have not established a confirmed motive.

The timing of the incidents has increased concern over the protection of Germany’s critical infrastructure. Security officials are examining whether the two cases share similarities, although authorities have stressed that it is too early to establish a direct connection.

Investigators are continuing to work with energy companies and network operators while examining evidence from the affected facilities.

The case remains active, and further details are expected as German authorities determine how the disruption was carried out and whether it forms part of a wider campaign against critical infrastructure.