{
  "id": "5b904e30-803b-47bc-937e-570d22f22f2f",
  "url": "https://www.euronews.com/my-europe/2026/04/15/sweden-foiled-pro-russian-cyberattack-on-thermal-power-plant-in-2025-minister-says",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Sweden",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Sweden",
    "Russia",
    "Cyber attack",
    "Critical infrastructure",
    "Energy sector",
    "Operational technology",
    "russian intelligence operations",
    "Hybrid warfare"
  ],
  "nodes": [],
  "countries": [
    "Sweden"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "In mid-2025, Sweden's Security Service successfully stopped a cyberattack targeting a thermal power plant in western Sweden. The attack was carried out by a group linked to Russian intelligence and aimed to disrupt the heating supply. Civil Defence Minister Carl-Oskar Bohlin stated there were no serious consequences thanks to effective security systems. The incident illustrates a shift toward more sophisticated cyber threats against operational technology controlling infrastructure, moving beyond simple DDoS tactics. The Swedish government is raising awareness and taking the threat seriously, emphasizing solidarity with allies and resilience against such hostile activities.",
  "summary_short": "Sweden foiled a pro-Russian cyberattack on a thermal power plant in western Sweden in mid-2025, linked to Russian intelligence aiming to disrupt heating supply.",
  "summary_extended": null,
  "actor_primary": "Russian intelligence and security services",
  "target_primary": null,
  "location_text": "thermal power plant in western Sweden",
  "location_region": "Western Sweden",
  "location_coordinates_lat": 59.8586,
  "location_coordinates_lon": 15.6466,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The cyberattack was directly linked to Russian intelligence and aimed to disrupt critical energy infrastructure, representing a clear hostile hybrid warfare action targeting Sweden's physical infrastructure.",
  "event_time_utc": "2025-06-15T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-05-19T09:27:00.382Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "5b904e30-803b-47bc-937e-570d22f22f2f",
  "url": "https://www.euronews.com/my-europe/2026/04/15/sweden-foiled-pro-russian-cyberattack-on-thermal-power-plant-in-2025-minister-says",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Sweden",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Sweden",
    "Russia",
    "Cyber attack",
    "Critical infrastructure",
    "Energy sector",
    "Operational technology",
    "russian intelligence operations",
    "Hybrid warfare"
  ],
  "nodes": [],
  "countries": [
    "Sweden"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "In mid-2025, Sweden's Security Service successfully stopped a cyberattack targeting a thermal power plant in western Sweden. The attack was carried out by a group linked to Russian intelligence and aimed to disrupt the heating supply. Civil Defence Minister Carl-Oskar Bohlin stated there were no serious consequences thanks to effective security systems. The incident illustrates a shift toward more sophisticated cyber threats against operational technology controlling infrastructure, moving beyond simple DDoS tactics. The Swedish government is raising awareness and taking the threat seriously, emphasizing solidarity with allies and resilience against such hostile activities.",
  "summary_short": "Sweden foiled a pro-Russian cyberattack on a thermal power plant in western Sweden in mid-2025, linked to Russian intelligence aiming to disrupt heating supply.",
  "summary_extended": null,
  "actor_primary": "Russian intelligence and security services",
  "target_primary": null,
  "location_text": "thermal power plant in western Sweden",
  "location_region": "Western Sweden",
  "location_coordinates_lat": 59.8586,
  "location_coordinates_lon": 15.6466,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The cyberattack was directly linked to Russian intelligence and aimed to disrupt critical energy infrastructure, representing a clear hostile hybrid warfare action targeting Sweden's physical infrastructure.",
  "event_time_utc": "2025-06-15T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-05-19T09:27:00.382Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}