Signal
Submitted
Feb 1, 2026, 00:14 UTC
Russian hybrid warfare escalates across NATO’s Eastern Flank in 2024–2025, targeting Poland, Baltic states, and Romania via sabotage, cyberattacks, and election interference.
Since 2014, Russia has conducted an increasingly complex hybrid war campaign targeting NATO's Eastern Flank, with a marked escalation in 2024 and 2025. The Kremlin has combined sabotage, cyberattacks, disinformation, and covert proxy actions across multiple countries. Highlights include a major arson attack on a Warsaw shopping center in May 2024 attributed to Russian intelligence, doubling of cyberattacks on Polish critical infrastructure in 2025, disruption of Baltic Sea undersea cable connectivity due to sabotage attributed to Russia, arson on a Lithuanian IKEA store, and intensification of election interference leading to annulment of Romania's 2024 presidential election. The Kremlin’s decentralized and multi-layered hybrid operations aim to paralyze critical infrastructure and democratic institutions without triggering overt military conflict. Polish authorities responded by closing the Russian consulate in Krakow and threatening further measures. The article emphasizes the urgent need for coordinated NATO and EU defensive and offensive measures to counter these evolving hybrid threats.
Confidence: High
Clear and explicit evidence that Russia conducted hostile hybrid warfare activities including sabotage, cyberattacks, and election interference against NATO member states on the Eastern Flank is provided, with named officials confirming attacks and responses.
Source URL
https://neweasterneurope.eu/2025/06/13/russias-hybrid-war-on-natos-eastern-flank-quietly-escalates
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "ab82a974-184e-4829-b92a-b8b3b6052a1e",
"url": "https://neweasterneurope.eu/2025/06/13/russias-hybrid-war-on-natos-eastern-flank-quietly-escalates",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Poland",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"hybrid warfare",
"Russian interference",
"cyberattacks",
"sabotage",
"Eastern Flank",
"Poland",
"baltic sea region",
"Romania",
"election interference",
"shadow fleet"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Russia’s hybrid war on NATO’s Eastern Flank quietly escalates",
"description": "Since 2014, Russia has steadily escalated a complex hybrid warfare campaign against NATO's Eastern Flank, leveraging subversion, sabotage, cyberattacks, and disinformation to undermine democratic institutions and critical infrastructure in Poland, the Baltic states, and Romania. Notable incidents include a confirmed Russian intelligence-supported arson attack on a Warsaw shopping center in May 2024, increased cyberattacks targeting Polish water, energy, and government systems, election interference attempts in Poland and Romania, sabotage of the Baltic Sea undersea cable in Lithuania, and attacks on Lithuanian commercial infrastructure such as an IKEA store. These actions form part of an escalating, decentralized Kremlin strategy designed to paralyze the functioning of EU member states without provoking a unified European military response. In response, Poland expelled Russian consular staff and warned of further measures if attacks continue, while the article calls for enhanced NATO and EU coordinated offensive and defensive hybrid warfare countermeasures including sanctions and strategic information operations.",
"summary_short": "Russian hybrid warfare escalates across NATO’s Eastern Flank in 2024–2025, targeting Poland, Baltic states, and Romania via sabotage, cyberattacks, and election interference.",
"summary_extended": "Since 2014, Russia has conducted an increasingly complex hybrid war campaign targeting NATO's Eastern Flank, with a marked escalation in 2024 and 2025. The Kremlin has combined sabotage, cyberattacks, disinformation, and covert proxy actions across multiple countries. Highlights include a major arson attack on a Warsaw shopping center in May 2024 attributed to Russian intelligence, doubling of cyberattacks on Polish critical infrastructure in 2025, disruption of Baltic Sea undersea cable connectivity due to sabotage attributed to Russia, arson on a Lithuanian IKEA store, and intensification of election interference leading to annulment of Romania's 2024 presidential election. The Kremlin’s decentralized and multi-layered hybrid operations aim to paralyze critical infrastructure and democratic institutions without triggering overt military conflict. Polish authorities responded by closing the Russian consulate in Krakow and threatening further measures. The article emphasizes the urgent need for coordinated NATO and EU defensive and offensive measures to counter these evolving hybrid threats.",
"actor_primary": "Russian intelligence",
"target_primary": null,
"location_text": "Warsaw, Poland; Baltic states; Lithuania; Latvia; Estonia; Romania",
"location_region": null,
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "Clear and explicit evidence that Russia conducted hostile hybrid warfare activities including sabotage, cyberattacks, and election interference against NATO member states on the Eastern Flank is provided, with named officials confirming attacks and responses.",
"event_time_utc": "2025-05-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:43.349Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
C
Info credibility
3
Event time
May 1, 2025, 00:00 UTC
Event time confidence
unknown
Location
Warsaw, Poland; Baltic states; Lithuania; Latvia; Estonia; Romania
Primary actor
Russian intelligence
Country
Poland
Tags
hybrid warfare, Russian interference, cyberattacks, sabotage, Eastern Flank, Poland, baltic sea region, Romania, election interference, shadow fleet
Nodes
Node 1: Borders
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Russian hybrid warfare escalates across NATO’s Eastern Flank in 2024–2025, targeting Poland, Baltic states, and Romania via sabotage, cyberattacks, and election interference.
Since 2014, Russia has conducted an increasingly complex hybrid war campaign targeting NATO's Eastern Flank, with a marked escalation in 2024 and 2025. The Kremlin has combined sabotage, cyberattacks, disinformation, and covert proxy actions across multiple countries. Highlights include a major arson attack on a Warsaw shopping center in May 2024 attributed to Russian intelligence, doubling of cyberattacks on Polish critical infrastructure in 2025, disruption of Baltic Sea undersea cable connectivity due to sabotage attributed to Russia, arson on a Lithuanian IKEA store, and intensification of election interference leading to annulment of Romania's 2024 presidential election. The Kremlin’s decentralized and multi-layered hybrid operations aim to paralyze critical infrastructure and democratic institutions without triggering overt military conflict. Polish authorities responded by closing the Russian consulate in Krakow and threatening further measures. The article emphasizes the urgent need for coordinated NATO and EU defensive and offensive measures to counter these evolving hybrid threats.
Confidence: High
Clear and explicit evidence that Russia conducted hostile hybrid warfare activities including sabotage, cyberattacks, and election interference against NATO member states on the Eastern Flank is provided, with named officials confirming attacks and responses.
Source URL
https://neweasterneurope.eu/2025/06/13/russias-hybrid-war-on-natos-eastern-flank-quietly-escalates
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "ab82a974-184e-4829-b92a-b8b3b6052a1e",
"url": "https://neweasterneurope.eu/2025/06/13/russias-hybrid-war-on-natos-eastern-flank-quietly-escalates",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Poland",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"hybrid warfare",
"Russian interference",
"cyberattacks",
"sabotage",
"Eastern Flank",
"Poland",
"baltic sea region",
"Romania",
"election interference",
"shadow fleet"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": "Russia’s hybrid war on NATO’s Eastern Flank quietly escalates",
"description": "Since 2014, Russia has steadily escalated a complex hybrid warfare campaign against NATO's Eastern Flank, leveraging subversion, sabotage, cyberattacks, and disinformation to undermine democratic institutions and critical infrastructure in Poland, the Baltic states, and Romania. Notable incidents include a confirmed Russian intelligence-supported arson attack on a Warsaw shopping center in May 2024, increased cyberattacks targeting Polish water, energy, and government systems, election interference attempts in Poland and Romania, sabotage of the Baltic Sea undersea cable in Lithuania, and attacks on Lithuanian commercial infrastructure such as an IKEA store. These actions form part of an escalating, decentralized Kremlin strategy designed to paralyze the functioning of EU member states without provoking a unified European military response. In response, Poland expelled Russian consular staff and warned of further measures if attacks continue, while the article calls for enhanced NATO and EU coordinated offensive and defensive hybrid warfare countermeasures including sanctions and strategic information operations.",
"summary_short": "Russian hybrid warfare escalates across NATO’s Eastern Flank in 2024–2025, targeting Poland, Baltic states, and Romania via sabotage, cyberattacks, and election interference.",
"summary_extended": "Since 2014, Russia has conducted an increasingly complex hybrid war campaign targeting NATO's Eastern Flank, with a marked escalation in 2024 and 2025. The Kremlin has combined sabotage, cyberattacks, disinformation, and covert proxy actions across multiple countries. Highlights include a major arson attack on a Warsaw shopping center in May 2024 attributed to Russian intelligence, doubling of cyberattacks on Polish critical infrastructure in 2025, disruption of Baltic Sea undersea cable connectivity due to sabotage attributed to Russia, arson on a Lithuanian IKEA store, and intensification of election interference leading to annulment of Romania's 2024 presidential election. The Kremlin’s decentralized and multi-layered hybrid operations aim to paralyze critical infrastructure and democratic institutions without triggering overt military conflict. Polish authorities responded by closing the Russian consulate in Krakow and threatening further measures. The article emphasizes the urgent need for coordinated NATO and EU defensive and offensive measures to counter these evolving hybrid threats.",
"actor_primary": "Russian intelligence",
"target_primary": null,
"location_text": "Warsaw, Poland; Baltic states; Lithuania; Latvia; Estonia; Romania",
"location_region": null,
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "Clear and explicit evidence that Russia conducted hostile hybrid warfare activities including sabotage, cyberattacks, and election interference against NATO member states on the Eastern Flank is provided, with named officials confirming attacks and responses.",
"event_time_utc": "2025-05-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:43.349Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
C
Info credibility
3
Event time
May 1, 2025, 00:00 UTC
Event time confidence
unknown
Location
Warsaw, Poland; Baltic states; Lithuania; Latvia; Estonia; Romania
Primary actor
Russian intelligence
Country
Poland
Tags
hybrid warfare, Russian interference, cyberattacks, sabotage, Eastern Flank, Poland, baltic sea region, Romania, election interference, shadow fleet
Nodes
Node 1: Borders