Twelve workers at a DHL distribution center in Langenzenn, Germany suffered injuries Friday morning, June 6, 2025, after exposure to an unknown white powder that leaked from a suspicious package, prompting the deployment of approximately 100 emergency personnel and the evacuation of the facility.
The incident occurred near Nuremberg in southern Germany when employees came into contact with the mysterious substance during routine package handling operations. Seven workers required hospitalization after experiencing skin irritation and rashes, with additional injuries possible as medical evaluations continued.
Emergency responders, including police, firefighters, and specialized hazardous materials teams from Erlangen and Greding, responded to the scene. The Central Franconia Police Headquarters confirmed that “hazardous materials teams from Erlangen and Greding are on site. The affected people are being cared for by firefighters.”
The facility was evacuated entirely while authorities investigated the nature of the substance. Firefighters established decontamination showers to remove potentially harmful materials from exposed individuals. Thirty-five people passed through the decontamination process as a precautionary measure.
Police spokeswoman Janine Mendel, who handles communications for the regional force, warned that casualty numbers could increase as medical assessments proceeded. The injured workers received dermatological treatment for toxic contamination, causing skin irritation and itching. By 9 a.m. local time, several distribution center employees were complaining of rashes and discomfort.
Authorities emphasized that despite the workplace emergency, no danger existed “to the general public,” according to police statements.
The white powder was discovered on the exterior surface of the package, immediately triggering health complaints among workers who handled it. Later Friday afternoon, DHL confirmed the substance was Phoron, a crystalline acetone-based solvent. District Fire Chief Frank Stegmann stated that the substance matched the symptoms reported by affected employees, including skin and eye irritation.
This incident follows a documented pattern of suspicious packages targeting European logistics networks. In July 2024, similar packages ignited at DHL facilities in Birmingham, England, and Leipzig, Germany. Western intelligence officials attributed those incidents to Russian military intelligence operations designed to test cargo security systems for potential attacks on North America-bound flights.
The broader sabotage campaign has been linked to Russia’s military intelligence agency, the GRU, coordinating operations across multiple European countries since Russia’s February 2022 invasion of Ukraine. European security officials have documented incidents in Poland, Lithuania, Latvia, Estonia, and France involving arson attacks, vandalism, and parcel-based incendiary devices.
Polish authorities arrested four individuals in October 2024 connected to explosive parcels sent via courier companies to European Union countries and Britain. Investigation findings revealed these packages were designed to test transfer channels for future attacks targeting the United States and Canada. Polish prosecutors stated the group’s activities involved sabotage and diversion “related to sending parcels containing camouflaged explosives and dangerous materials via courier companies to European Union countries and Great Britain.”
German prosecutors announced in May 2025 the arrest of three Ukrainian nationals suspected of plotting sabotage attacks on goods shipments for Russia. The suspects were accused of agreeing to conduct arson and bomb attacks on freight transport in Germany while acting on behalf of Russian state authorities.
Thomas Haldenwang, head of Germany’s domestic intelligence service, previously told parliament that a Leipzig package would have resulted “in a crash” had it ignited during flight operations.
DHL stated it could not determine precisely where the Phoron substance originated or how it came to be on multiple packages.
DHL operates major logistics hubs throughout Germany and Europe, processing millions of packages daily across its distribution network. The company has enhanced screening procedures following previous incidents. The Langenzenn facility serves as a key distribution point for the Nuremberg region in Bavaria.
European intelligence agencies have documented significant increases in hybrid warfare activities since 2022, with Russia allegedly employing criminal proxies and online recruits. These operations have included arson attacks on industrial facilities, vandalism targeting political figures, and sophisticated parcel-based incendiary devices designed to ignite during transportation.
Previous incidents included fires at paint factories and shopping centers in Poland, arson attacks on IKEA stores in Lithuania, and vandalism targeting political figures in Estonia. Many operations have been traced to recruitment networks operating through encrypted messaging platforms, where operatives receive cryptocurrency payments without full knowledge of their strategic purpose.
The incident represents the latest development in what security analysts describe as an unprecedented hybrid warfare campaign targeting European infrastructure. The recruitment method typically involves hiring individuals through social media platforms, often targeting people with financial difficulties or criminal backgrounds who are unaware of the broader strategic implications of the operations.
Local authorities continue to urge residents to avoid the area around the DHL facility while investigation procedures are ongoing. The facility remains closed pending completion of security assessment and decontamination procedures. Workers not directly exposed to the substance have been temporarily relocated to alternative facilities to maintain regional distribution operations.