Russian Shadow Fleet Tanker Suspected of Damaging Undersea Cable in Baltic Sea on New Year’s Eve 2025

Energy & Infrastructure AttacksCritical Infrastructure SabotageUndersea cables

Aggressor

Summary

A Russian shadow fleet tanker was detained on December 31, 2025, for suspected sabotage of an undersea cable in Estonia’s Baltic Sea exclusive economic zone, highlighting Russia’s covert hybrid warfare using shadow fleet vessels.

On New Year’s Eve 2025, Finnish authorities detained a cargo ship suspected of damaging an undersea cable in Estonia's economic zone in the Baltic Sea. The vessel left a 10km drag mark from its anchor and was found carrying sanctioned Russian steel and military goods routed between Russia and Iran. As part of Russia’s shadow fleet—ships that evade sanctions, fly false flags, and use GPS jamming—this ship is implicated in hybrid warfare activities including sabotage of critical infrastructure. By 2025, there had been 11 reported undersea cable attacks in the Baltic region attributed to such vessels. These acts serve Russia’s strategic goal of undermining NATO resilience on its eastern flank, supplementing other hybrid tactics like drone deployments, espionage, and cyber-attacks. The incident underscores the shadow fleet’s multifaceted role in Moscow’s covert military logistics and hybrid conflict efforts in Northern Europe.

Classification

Confidence: High

The event clearly describes Russian hybrid aggressor actions—sabotage of undersea infrastructure by shadow fleet vessels in Baltic Sea waters, with named actors, specific timing, and operational details supporting classification as an aggressor event.

Source URL

https://united24media.com/world/what-russias-baltic-cable-sabotage-tells-us-about-its-shadow-fleet-15819

Open source

Provenance

Publisher: extension
Submitted: Feb 15, 2026, 17:19 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Dec 31, 2025, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "318271a2-63ba-4757-8a55-938bf693e641",
  "url": "https://united24media.com/world/what-russias-baltic-cable-sabotage-tells-us-about-its-shadow-fleet-15819",
  "source": "extension",
  "status": "approved",
  "category": "Energy & Infrastructure Attacks",
  "subcategory": "Critical Infrastructure Sabotage",
  "incident_type": "Undersea cables",
  "country": "Estonia",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian invasion",
    "shadow fleet",
    "undersea cables",
    "Baltic Sea",
    "hybrid warfare",
    "sanctions",
    "Russia",
    "Estonia",
    "Finnish authorities"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Undersea",
  "headline": "Russian Shadow Fleet Tanker Suspected of Damaging Undersea Cable in Baltic Sea on New Year’s Eve 2025",
  "description": "On December 31, 2025, a cargo ship identified as part of Russia's shadow fleet was suspected of damaging an undersea communications cable within Estonia’s exclusive economic zone in the Baltic Sea. Finnish authorities detained the vessel after observing a 10km anchor drag mark on the seabed. The ship was found carrying sanctioned Russian steel and shipping military goods between Russia and Iran. It was subsequently escorted out of Finnish waters. This incident is one of at least 11 undersea cable sabotage events in the Baltic region by 2025, linked to Russia’s shadow fleet, a group of vessels skirting sanctions and involved in covert military and hybrid warfare activities including weapons shipping, GPS jamming, and intelligence operations. The shadow fleet’s activities form part of Russia's broader hybrid war strategy targeting NATO's eastern flank, including drone deployments, espionage, sabotage, and infrastructure disruption.",
  "summary_short": "A Russian shadow fleet tanker was detained on December 31, 2025, for suspected sabotage of an undersea cable in Estonia’s Baltic Sea exclusive economic zone, highlighting Russia’s covert hybrid warfare using shadow fleet vessels.",
  "summary_extended": "On New Year’s Eve 2025, Finnish authorities detained a cargo ship suspected of damaging an undersea cable in Estonia's economic zone in the Baltic Sea. The vessel left a 10km drag mark from its anchor and was found carrying sanctioned Russian steel and military goods routed between Russia and Iran. As part of Russia’s shadow fleet—ships that evade sanctions, fly false flags, and use GPS jamming—this ship is implicated in hybrid warfare activities including sabotage of critical infrastructure. By 2025, there had been 11 reported undersea cable attacks in the Baltic region attributed to such vessels. These acts serve Russia’s strategic goal of undermining NATO resilience on its eastern flank, supplementing other hybrid tactics like drone deployments, espionage, and cyber-attacks. The incident underscores the shadow fleet’s multifaceted role in Moscow’s covert military logistics and hybrid conflict efforts in Northern Europe.",
  "actor_primary": "Russia’s shadow fleet",
  "target_primary": null,
  "location_text": "Estonian exclusive economic zone, Baltic Sea",
  "location_region": null,
  "location_coordinates_lat": 59,
  "location_coordinates_lon": 23.5,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event clearly describes Russian hybrid aggressor actions—sabotage of undersea infrastructure by shadow fleet vessels in Baltic Sea waters, with named actors, specific timing, and operational details supporting classification as an aggressor event.",
  "event_time_utc": "2025-12-31T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "exact",
  "created_at": "2026-02-15T17:19:00.029Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "exact",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: ExactLocation: Approximate

Source reliability

Info credibility

Event time

Dec 31, 2025, 00:00 UTC

Event time confidence

exact

Location

Estonian exclusive economic zone, Baltic Sea

Primary actor

Russia’s shadow fleet

Country

Estonia

Tags

russian invasion, shadow fleet, undersea cables, Baltic Sea, hybrid warfare, sanctions, Russia, Estonia, Finnish authorities

Nodes

Node 1: Borders

Loading signal...

{ "id": "318271a2-63ba-4757-8a55-938bf693e641", "url": "https://united24media.com/world/what-russias-baltic-cable-sabotage-tells-us-about-its-shadow-fleet-15819", "source": "extension", "status": "approved", "category": "Energy & Infrastructure Attacks", "subcategory": "Critical Infrastructure Sabotage", "incident_type": "Undersea cables", "country": "Estonia", "source_reliability": "B", "info_credibility": "3", "tags": [ "russian invasion", "shadow fleet", "undersea cables", "Baltic Sea", "hybrid warfare", "sanctions", "Russia", "Estonia", "Finnish authorities" ], "nodes": [ "Node 1: Borders" ], "countries": [], "where_text": "Undersea", "headline": "Russian Shadow Fleet Tanker Suspected of Damaging Undersea Cable in Baltic Sea on New Year’s Eve 2025", "description": "On December 31, 2025, a cargo ship identified as part of Russia's shadow fleet was suspected of damaging an undersea communications cable within Estonia’s exclusive economic zone in the Baltic Sea. Finnish authorities detained the vessel after observing a 10km anchor drag mark on the seabed. The ship was found carrying sanctioned Russian steel and shipping military goods between Russia and Iran. It was subsequently escorted out of Finnish waters. This incident is one of at least 11 undersea cable sabotage events in the Baltic region by 2025, linked to Russia’s shadow fleet, a group of vessels skirting sanctions and involved in covert military and hybrid warfare activities including weapons shipping, GPS jamming, and intelligence operations. The shadow fleet’s activities form part of Russia's broader hybrid war strategy targeting NATO's eastern flank, including drone deployments, espionage, sabotage, and infrastructure disruption.", "summary_short": "A Russian shadow fleet tanker was detained on December 31, 2025, for suspected sabotage of an undersea cable in Estonia’s Baltic Sea exclusive economic zone, highlighting Russia’s covert hybrid warfare using shadow fleet vessels.", "summary_extended": "On New Year’s Eve 2025, Finnish authorities detained a cargo ship suspected of damaging an undersea cable in Estonia's economic zone in the Baltic Sea. The vessel left a 10km drag mark from its anchor and was found carrying sanctioned Russian steel and military goods routed between Russia and Iran. As part of Russia’s shadow fleet—ships that evade sanctions, fly false flags, and use GPS jamming—this ship is implicated in hybrid warfare activities including sabotage of critical infrastructure. By 2025, there had been 11 reported undersea cable attacks in the Baltic region attributed to such vessels. These acts serve Russia’s strategic goal of undermining NATO resilience on its eastern flank, supplementing other hybrid tactics like drone deployments, espionage, and cyber-attacks. The incident underscores the shadow fleet’s multifaceted role in Moscow’s covert military logistics and hybrid conflict efforts in Northern Europe.", "actor_primary": "Russia’s shadow fleet", "target_primary": null, "location_text": "Estonian exclusive economic zone, Baltic Sea", "location_region": null, "location_coordinates_lat": 59, "location_coordinates_lon": 23.5, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event clearly describes Russian hybrid aggressor actions—sabotage of undersea infrastructure by shadow fleet vessels in Baltic Sea waters, with named actors, specific timing, and operational details supporting classification as an aggressor event.", "event_time_utc": "2025-12-31T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "exact", "created_at": "2026-02-15T17:19:00.029Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "exact", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }