In late December 2024, the Finnish coast guard intercepted a Russian shadow fleet ship engaged in sabotage and hybrid warfare activities, highlighting the limits of resilience alone against Russian hybrid threats.

Military & Paramilitary OperationsUnconventional / ParamilitaryCross-border raids

AggressorDefense

Summary

On 31 December 2024, a Finnish coast guard ship intercepted the 'Eagle S,' a ship belonging to a Russian shadow fleet, engaged in cutting the Estlink2 cable near Finland. This sabotage occurred as part of a wider pattern of Russian hybrid warfare including cyberattacks, GPS jamming, weaponising migrants, and misinformation campaigns. The incident, along with recent attacks on German navy ships, underscores Russia's success in using these tactics to weaken the West with relatively low cost. European and NATO officials, including NATO Secretary General Mark Rutte, emphasized the need for increased defensive measures such as more patrol ships, drones, and aircraft. Finnish President Sauli Niinistö and other European leaders have called for moving beyond mere resilience toward restoring deterrence by actively disrupting Russian hybrid tactics. The Finnish coast guard's confiscation of spy equipment aboard the 'Eagle S' and their refusal to engage with Russian authorities further demonstrates a firm stance. The event illustrates the challenge democracies face in balancing openness with effective countermeasures against covert Russian aggression in maritime and hybrid domains.

Classification

Confidence: High

The event clearly documents a Russian covert sabotage attack on critical infrastructure (undersea cable) by the shadow fleet ship Eagle S, confirmed by Finnish authorities, thus indicating hostile aggression. The article also describes NATO and EU calls for enhanced vigilance, increased patrols, drones, and aircraft as defensive responses, making this both an aggressor and defense preparation event.

Source URL

https://iss.europa.eu/publications/commentary/resilience-alone-not-enough-hybrid-war-russia

Open source

Provenance

Publisher: extension
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 8, 2026, 23:01 UTC
Event time: Dec 31, 2024, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "8da2750f-9869-428b-8455-7bf79f3e31c0",
  "url": "https://iss.europa.eu/publications/commentary/resilience-alone-not-enough-hybrid-war-russia",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Cross-border raids",
  "country": "Finland",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Russian hybrid warfare",
    "Estlink2 sabotage",
    "Finnish coast guard",
    "Russian shadow fleet",
    "NATO Baltic Sentry",
    "undersea cables",
    "GPS jamming",
    "weaponized migrants",
    "European security",
    "counter-hybrid tactics"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Maritime",
  "headline": null,
  "description": "At the end of December 2024, the Finnish coast guard intercepted the Russian shadow fleet ship 'Eagle S' just as it was sabotaging the Estlink2 undersea cable. This action was part of a broader Russian hybrid warfare campaign involving sabotage, cyberattacks, GPS jamming, weaponized migrant flows, and misinformation campaigns across Europe, including Germany. The Finnish authorities found spy equipment aboard the vessel and refused Russian requests for contact about its return. Northern European leaders stress that resilience alone is insufficient and call for active deterrence and enhanced defensive capabilities, including more patrol ships, drones, and aircraft, with NATO backing such initiatives. The incident highlights Russia’s use of covert maritime sabotage to undermine Western infrastructure and security, emphasizing the need for proactive and collaborative defense measures.",
  "summary_short": "In late December 2024, the Finnish coast guard intercepted a Russian shadow fleet ship engaged in sabotage and hybrid warfare activities, highlighting the limits of resilience alone against Russian hybrid threats.",
  "summary_extended": "On 31 December 2024, a Finnish coast guard ship intercepted the 'Eagle S,' a ship belonging to a Russian shadow fleet, engaged in cutting the Estlink2 cable near Finland. This sabotage occurred as part of a wider pattern of Russian hybrid warfare including cyberattacks, GPS jamming, weaponising migrants, and misinformation campaigns. The incident, along with recent attacks on German navy ships, underscores Russia's success in using these tactics to weaken the West with relatively low cost. European and NATO officials, including NATO Secretary General Mark Rutte, emphasized the need for increased defensive measures such as more patrol ships, drones, and aircraft. Finnish President Sauli Niinistö and other European leaders have called for moving beyond mere resilience toward restoring deterrence by actively disrupting Russian hybrid tactics. The Finnish coast guard's confiscation of spy equipment aboard the 'Eagle S' and their refusal to engage with Russian authorities further demonstrates a firm stance. The event illustrates the challenge democracies face in balancing openness with effective countermeasures against covert Russian aggression in maritime and hybrid domains.",
  "actor_primary": "Eagle S",
  "target_primary": null,
  "location_text": "Finnish coastal waters, near the Estlink2 undersea cable",
  "location_region": "Finland Coast",
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event clearly documents a Russian covert sabotage attack on critical infrastructure (undersea cable) by the shadow fleet ship Eagle S, confirmed by Finnish authorities, thus indicating hostile aggression. The article also describes NATO and EU calls for enhanced vigilance, increased patrols, drones, and aircraft as defensive responses, making this both an aggressor and defense preparation event.",
  "event_time_utc": "2024-12-31T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-01T00:14:39.791Z",
  "updated_at": "2026-11-08T23:01:32.977Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: Same dayLocation: Approximate

Source reliability

Info credibility

Event time

Dec 31, 2024, 00:00 UTC

Event time confidence

pm24h

Location

Finnish coastal waters, near the Estlink2 undersea cable

Region

Finland Coast

Primary actor

Eagle S

Country

Finland

Tags

Russian hybrid warfare, Estlink2 sabotage, Finnish coast guard, Russian shadow fleet, NATO Baltic Sentry, undersea cables, GPS jamming, weaponized migrants, European security, counter-hybrid tactics

Nodes

Node 1: Borders

Loading signal...

{ "id": "8da2750f-9869-428b-8455-7bf79f3e31c0", "url": "https://iss.europa.eu/publications/commentary/resilience-alone-not-enough-hybrid-war-russia", "source": "extension", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Unconventional / Paramilitary", "incident_type": "Cross-border raids", "country": "Finland", "source_reliability": "B", "info_credibility": "3", "tags": [ "Russian hybrid warfare", "Estlink2 sabotage", "Finnish coast guard", "Russian shadow fleet", "NATO Baltic Sentry", "undersea cables", "GPS jamming", "weaponized migrants", "European security", "counter-hybrid tactics" ], "nodes": [ "Node 1: Borders" ], "countries": [], "where_text": "Maritime", "headline": null, "description": "At the end of December 2024, the Finnish coast guard intercepted the Russian shadow fleet ship 'Eagle S' just as it was sabotaging the Estlink2 undersea cable. This action was part of a broader Russian hybrid warfare campaign involving sabotage, cyberattacks, GPS jamming, weaponized migrant flows, and misinformation campaigns across Europe, including Germany. The Finnish authorities found spy equipment aboard the vessel and refused Russian requests for contact about its return. Northern European leaders stress that resilience alone is insufficient and call for active deterrence and enhanced defensive capabilities, including more patrol ships, drones, and aircraft, with NATO backing such initiatives. The incident highlights Russia’s use of covert maritime sabotage to undermine Western infrastructure and security, emphasizing the need for proactive and collaborative defense measures.", "summary_short": "In late December 2024, the Finnish coast guard intercepted a Russian shadow fleet ship engaged in sabotage and hybrid warfare activities, highlighting the limits of resilience alone against Russian hybrid threats.", "summary_extended": "On 31 December 2024, a Finnish coast guard ship intercepted the 'Eagle S,' a ship belonging to a Russian shadow fleet, engaged in cutting the Estlink2 cable near Finland. This sabotage occurred as part of a wider pattern of Russian hybrid warfare including cyberattacks, GPS jamming, weaponising migrants, and misinformation campaigns. The incident, along with recent attacks on German navy ships, underscores Russia's success in using these tactics to weaken the West with relatively low cost. European and NATO officials, including NATO Secretary General Mark Rutte, emphasized the need for increased defensive measures such as more patrol ships, drones, and aircraft. Finnish President Sauli Niinistö and other European leaders have called for moving beyond mere resilience toward restoring deterrence by actively disrupting Russian hybrid tactics. The Finnish coast guard's confiscation of spy equipment aboard the 'Eagle S' and their refusal to engage with Russian authorities further demonstrates a firm stance. The event illustrates the challenge democracies face in balancing openness with effective countermeasures against covert Russian aggression in maritime and hybrid domains.", "actor_primary": "Eagle S", "target_primary": null, "location_text": "Finnish coastal waters, near the Estlink2 undersea cable", "location_region": "Finland Coast", "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event clearly documents a Russian covert sabotage attack on critical infrastructure (undersea cable) by the shadow fleet ship Eagle S, confirmed by Finnish authorities, thus indicating hostile aggression. The article also describes NATO and EU calls for enhanced vigilance, increased patrols, drones, and aircraft as defensive responses, making this both an aggressor and defense preparation event.", "event_time_utc": "2024-12-31T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-01T00:14:39.791Z", "updated_at": "2026-11-08T23:01:32.977Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }