What the GSM-R Outage Revealed About German Rail Infrastructure

Railway networks are built around one assumption: communication will always be available.

On 23 June 2026, that assumption was tested when a software fault inside Germany’s GSM-R network caused a nationwide communications outage, bringing rail operations across the country to a standstill for more than two hours.

The incident wasn’t caused by cybercriminals. It wasn’t caused by hardware failure.

It was caused by something far more familiar to anyone working in complex operational systems: a routine maintenance activity that didn’t behave as expected.

A Routine Software Update That Became a National Incident

At approximately 22:30, DB InfraGO was carrying out scheduled maintenance to replace a network switch within its GSM-R communications infrastructure.

During the replacement, a software error occurred.

Normally, several layers of protection exist to prevent exactly this type of situation:

• Fault detection
• Automatic alerts
• Redundant backup systems

In this case, none of them behaved as intended.

The software fault failed to generate an error notification, meaning operators weren’t immediately aware of the problem.

Even more significantly, the redundant GSM-R backup system, designed specifically to take over during failures, did not automatically activate, despite being fully operational.

Without train radio communications, railway safety procedures required trains to remain stationary.

Across Germany, services stopped.

Why GSM-R Is So Important

GSM-R (Global System for Mobile Communications – Railway) is more than a communication network.

It is the operational nervous system of a modern railway.

It enables:

• Driver-to-signaller communication
• Operational control
• Emergency procedures
• Safe train movement
• Support for ETCS signalling

Without trusted communications, trains cannot safely continue operating.

This is why virtually every major European railway relies on GSM-R today.

Recovery Required Human Intervention

Once cyberattack scenarios had been ruled out, engineers manually switched operations onto the fallback system approximately 90 minutes later.

By 00:50 the network had been restored and services gradually resumed.

Passengers had already begun receiving hotel and taxi vouchers while recovery work continued.

Although the outage lasted just over two hours, it demonstrated how quickly operational disruption can cascade across an interconnected railway network.

What Changed Afterwards

DB InfraGO immediately introduced several operational changes:

• Pausing further component replacements
• Working with the equipment manufacturer to investigate the failed component
• Restricting future maintenance work to between midnight and 04:00 while operating only against the inactive redundancy environment

The infrastructure manager will also provide a full report to German regulators.

The Bigger Picture: Modernising Railway Communications

The outage also reinforces why European rail operators are investing heavily in modern communications infrastructure.

DB InfraGO is already:

• Modernising the existing GSM-R network
• Expanding fibre infrastructure
• Improving fallback communications through public mobile networks
• Preparing for Future Railway Mobile Communication System (FRMCS)

FRMCS is intended to replace GSM-R over the long term and provide greater bandwidth, resilience, and support for increasingly digital railway operations.

However, deployment remains several years away because European technical specifications are still being finalised.

For now, GSM-R will remain Germany’s primary railway communications platform for at least another decade.

Technology Didn’t Fail Alone

Incidents like this highlight an important lesson for railway operators.

Redundancy isn’t simply about installing backup systems.

It depends on software, configuration, maintenance procedures, operational governance, and recovery planning all functioning together under real-world conditions.

In this case, the backup system existed.

The challenge was that the automatic transition to it didn’t occur when it was needed most.

For organisations operating mission-critical infrastructure, resilience is measured not by whether failures occur, but by how effectively systems detect, isolate, and recover from them.

The June GSM-R outage serves as a reminder that as railway networks become increasingly digital, software reliability and operational resilience become just as important as the physical infrastructure itself.