{
  "id": "d40dac01-02e9-466c-b112-a80c481189ee",
  "url": "https://therecord.media/russia-cyberattacks-europe-warfare",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Propaganda & disinformation campaigns",
  "country": "Netherlands",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Kremlin",
    "european union",
    "sabotage",
    "cyberwarfare",
    "Netherlands"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Russia stepping up hybrid attacks, preparing for long standoff with West, Dutch intelligence warns",
  "description": "Dutch intelligence agencies AIVD and MIVD issued a joint assessment on February 20, 2026, warning that Russia is stepping up hybrid attacks across Europe involving cyberattacks, sabotage, disinformation, covert political influence, and espionage to prepare for a prolonged standoff with the West. The report signals that although a direct military clash between Russia and NATO remains unlikely, it is no longer unthinkable. Since 2023, there has been a sharp rise in such hybrid activities including distributed denial-of-service attacks on political and public-sector websites, cyber espionage stealing data from government systems, and Russian hacking groups such as Laundry Bear conducting operations in Europe. The Kremlin increasingly relies on 'low-level' agents and online operatives, despite the expulsion of hundreds of Russian intelligence officers after the 2022 invasion of Ukraine. The Dutch report highlights incidents involving damaged undersea cables in the Baltic Sea, drone sightings near sensitive sites, and maritime espionage, with some cable breaks likely accidental but confidence growing that some were deliberate acts linked to Russian activity. The Kremlin is also reportedly mapping seabed infrastructure and conducting maritime espionage through 'shadow fleet' vessels. Russia revised its nuclear doctrine in 2024 lowering thresholds for nuclear use, signaling escalation risks. The Dutch agencies stress the asymmetric and civilizational nature of the conflict and call for reinforced resilience across government, business, and critical infrastructure sectors. They warn that disruption of vital services could destabilize society even without open warfare and urge closer cooperation between national and international intelligence and private sector partners. They conclude Russia is preparing for a long, sustained hybrid confrontation targeting European cyberspace, politics, and daily life.",
  "summary_short": "Dutch intelligence warns Russia is increasing hybrid attacks across Europe involving cyberattacks, sabotage, disinformation, and covert influence in preparation for a prolonged standoff with the West.",
  "summary_extended": "According to a joint report by the Dutch General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD), Russia is intensifying hybrid warfare campaigns across Europe, combining cyberattacks, sabotage, disinformation, covert political influence, and espionage. The Dutch agencies note that despite a direct military clash between Russia and NATO being unlikely, it cannot be ruled out. There has been a rise in cyber operations including denial-of-service attacks and espionage targeting political and public sector websites, with incidents involving Russian-linked hacking groups like Laundry Bear. The Kremlin is adapting tactics to use 'low-level' agents and online operatives, maintaining influence despite expulsion of intelligence officers post-2022 invasion. The report highlights incidents involving undersea cable damage, drone sightings near sensitive sites, and maritime espionage, noting some cable breaks were likely accidental but confidence in Russian responsibility is increasing. The Dutch agencies characterize the conflict as a struggle between 'decadent' Western and 'unique' Russian civilization, with Russia revising its nuclear doctrine in 2024 to reduce thresholds for nuclear deterrence. The report stresses the asymmetric nature of the confrontation, requiring stronger resilience across European governments, businesses, and critical sectors, and calls for closer cooperation between national and international intelligence communities and private sector partners. The assessment warns Russia's hybrid warfare could destabilize society even absent open conflict and urges European countries to prepare for sustained pressure in cyberspace, politics, and daily life.",
  "actor_primary": "Laundry Bear",
  "target_primary": null,
  "location_text": "Europe",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor event because the article clearly describes Russian hybrid hostile activities including cyberattacks, sabotage, disinformation, espionage, and military preparations. Classified as defense prep because it also details NATO and European calls for increased resilience, operational response, and strategic readiness to counter these threats.",
  "event_time_utc": "2026-02-20T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-22T21:06:00.103Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "medium",
  "attribution_basis": "single_source"
}

{
  "id": "d40dac01-02e9-466c-b112-a80c481189ee",
  "url": "https://therecord.media/russia-cyberattacks-europe-warfare",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Information Operations",
  "incident_type": "Propaganda & disinformation campaigns",
  "country": "Netherlands",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Kremlin",
    "european union",
    "sabotage",
    "cyberwarfare",
    "Netherlands"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "Russia stepping up hybrid attacks, preparing for long standoff with West, Dutch intelligence warns",
  "description": "Dutch intelligence agencies AIVD and MIVD issued a joint assessment on February 20, 2026, warning that Russia is stepping up hybrid attacks across Europe involving cyberattacks, sabotage, disinformation, covert political influence, and espionage to prepare for a prolonged standoff with the West. The report signals that although a direct military clash between Russia and NATO remains unlikely, it is no longer unthinkable. Since 2023, there has been a sharp rise in such hybrid activities including distributed denial-of-service attacks on political and public-sector websites, cyber espionage stealing data from government systems, and Russian hacking groups such as Laundry Bear conducting operations in Europe. The Kremlin increasingly relies on 'low-level' agents and online operatives, despite the expulsion of hundreds of Russian intelligence officers after the 2022 invasion of Ukraine. The Dutch report highlights incidents involving damaged undersea cables in the Baltic Sea, drone sightings near sensitive sites, and maritime espionage, with some cable breaks likely accidental but confidence growing that some were deliberate acts linked to Russian activity. The Kremlin is also reportedly mapping seabed infrastructure and conducting maritime espionage through 'shadow fleet' vessels. Russia revised its nuclear doctrine in 2024 lowering thresholds for nuclear use, signaling escalation risks. The Dutch agencies stress the asymmetric and civilizational nature of the conflict and call for reinforced resilience across government, business, and critical infrastructure sectors. They warn that disruption of vital services could destabilize society even without open warfare and urge closer cooperation between national and international intelligence and private sector partners. They conclude Russia is preparing for a long, sustained hybrid confrontation targeting European cyberspace, politics, and daily life.",
  "summary_short": "Dutch intelligence warns Russia is increasing hybrid attacks across Europe involving cyberattacks, sabotage, disinformation, and covert influence in preparation for a prolonged standoff with the West.",
  "summary_extended": "According to a joint report by the Dutch General Intelligence and Security Service (AIVD) and Military Intelligence and Security Service (MIVD), Russia is intensifying hybrid warfare campaigns across Europe, combining cyberattacks, sabotage, disinformation, covert political influence, and espionage. The Dutch agencies note that despite a direct military clash between Russia and NATO being unlikely, it cannot be ruled out. There has been a rise in cyber operations including denial-of-service attacks and espionage targeting political and public sector websites, with incidents involving Russian-linked hacking groups like Laundry Bear. The Kremlin is adapting tactics to use 'low-level' agents and online operatives, maintaining influence despite expulsion of intelligence officers post-2022 invasion. The report highlights incidents involving undersea cable damage, drone sightings near sensitive sites, and maritime espionage, noting some cable breaks were likely accidental but confidence in Russian responsibility is increasing. The Dutch agencies characterize the conflict as a struggle between 'decadent' Western and 'unique' Russian civilization, with Russia revising its nuclear doctrine in 2024 to reduce thresholds for nuclear deterrence. The report stresses the asymmetric nature of the confrontation, requiring stronger resilience across European governments, businesses, and critical sectors, and calls for closer cooperation between national and international intelligence communities and private sector partners. The assessment warns Russia's hybrid warfare could destabilize society even absent open conflict and urges European countries to prepare for sustained pressure in cyberspace, politics, and daily life.",
  "actor_primary": "Laundry Bear",
  "target_primary": null,
  "location_text": "Europe",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as aggressor event because the article clearly describes Russian hybrid hostile activities including cyberattacks, sabotage, disinformation, espionage, and military preparations. Classified as defense prep because it also details NATO and European calls for increased resilience, operational response, and strategic readiness to counter these threats.",
  "event_time_utc": "2026-02-20T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-22T21:06:00.103Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "medium",
  "attribution_basis": "single_source"
}