Russia has intensified sabotage activities in Europe, notably attacking a Polish-Ukrainian railway corridor to undermine Western unity.

Military & Paramilitary OperationsUnconventional / ParamilitaryCross-border raids

AggressorDefense

Summary

In recent months, Russia has expanded operations into Europe through acts of sabotage, specifically targeting critical infrastructure such as a recent explosion on the Polish-Ukrainian railway. This tactic aims to weaken Western alliances without provoking a formal NATO response. Poland has initiated 'Operation Horizon,' deploying up to 10,000 military personnel to safeguard railways and logistics hubs. The Kremlin's strategy utilizes low-cost, hard-to-attribute operations, causing psychological distress while probing NATO defenses.

Classification

Confidence: High

Classified as an aggressor event due to the sabotage actions attributed to Russia in Poland. Additionally, the defensive preparations by Poland support this classification.

Source URL

https://atlanticcouncil.org/blogs/new-atlanticist/russias-shadow-war-how-the-kremlin-uses-sabotage-to-wear-down-europe

Open source

Provenance

Publisher: extension
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Mar 20, 2023, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "de721dcc-f3cc-4d2b-ae3f-92e8f3d517c3",
  "url": "https://atlanticcouncil.org/blogs/new-atlanticist/russias-shadow-war-how-the-kremlin-uses-sabotage-to-wear-down-europe",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Cross-border raids",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "sabotage",
    "Poland",
    "NATO",
    "Operation Horizon",
    "infrastructure attacks"
  ],
  "nodes": [],
  "countries": [
    "Poland"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "In recent months, Russia has expanded operations into Europe through acts of sabotage, specifically targeting critical infrastructure such as a recent explosion on the Polish-Ukrainian railway. This tactic aims to weaken Western alliances without provoking a formal NATO response. Poland has initiated 'Operation Horizon,' deploying up to 10,000 military personnel to safeguard railways and logistics hubs. The Kremlin's strategy utilizes low-cost, hard-to-attribute operations, causing psychological distress while probing NATO defenses.",
  "summary_short": "Russia has intensified sabotage activities in Europe, notably attacking a Polish-Ukrainian railway corridor to undermine Western unity.",
  "summary_extended": null,
  "actor_primary": "The Kremlin",
  "target_primary": null,
  "location_text": "Polish-Ukrainian railway corridor",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Unknown",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Classified as an aggressor event due to the sabotage actions attributed to Russia in Poland. Additionally, the defensive preparations by Poland support this classification.",
  "event_time_utc": "2023-03-20T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:48.593Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "unknown",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Unknown

Source reliability

Info credibility

Event time

Mar 20, 2023, 00:00 UTC

Event time confidence

unknown

Location

Polish-Ukrainian railway corridor

Primary actor

The Kremlin

Country

Poland

Countries

Poland

Tags

Russia, sabotage, Poland, NATO, Operation Horizon, infrastructure attacks

Loading signal...

{ "id": "de721dcc-f3cc-4d2b-ae3f-92e8f3d517c3", "url": "https://atlanticcouncil.org/blogs/new-atlanticist/russias-shadow-war-how-the-kremlin-uses-sabotage-to-wear-down-europe", "source": "extension", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Unconventional / Paramilitary", "incident_type": "Cross-border raids", "country": "Poland", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russia", "sabotage", "Poland", "NATO", "Operation Horizon", "infrastructure attacks" ], "nodes": [], "countries": [ "Poland" ], "where_text": "Land", "headline": null, "description": "In recent months, Russia has expanded operations into Europe through acts of sabotage, specifically targeting critical infrastructure such as a recent explosion on the Polish-Ukrainian railway. This tactic aims to weaken Western alliances without provoking a formal NATO response. Poland has initiated 'Operation Horizon,' deploying up to 10,000 military personnel to safeguard railways and logistics hubs. The Kremlin's strategy utilizes low-cost, hard-to-attribute operations, causing psychological distress while probing NATO defenses.", "summary_short": "Russia has intensified sabotage activities in Europe, notably attacking a Polish-Ukrainian railway corridor to undermine Western unity.", "summary_extended": null, "actor_primary": "The Kremlin", "target_primary": null, "location_text": "Polish-Ukrainian railway corridor", "location_region": null, "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Unknown", "is_aggressor_signal": true, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Classified as an aggressor event due to the sabotage actions attributed to Russia in Poland. Additionally, the defensive preparations by Poland support this classification.", "event_time_utc": "2023-03-20T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:48.593Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "unknown", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }