Every day, one story that matters, broken down into three numbered scenarios, each with its own probability. Never fixed — it shifts as the situation changes.
Scénario
Tuesday, carte_blanche
Hybrid warfare in Europe: is Russia sabotaging the EU?
Is the surge in sabotage across Europe a contained Russian hybrid war, or is the threshold for a NATO response about to be crossed?
Publié le 6 octobre 2026
Share:
The facts
Blocked railway tracks in Germany, torched warehouses in Poland, severed undersea cables in the Baltic Sea. For several months, European countries have faced a series of covert attacks targeting their transport and energy infrastructure. These hostile acts do not resemble conventional military operations conducted by uniformed soldiers. Instead, they take the form of targeted incidents, often carried out by proxies recruited online for pay. Western intelligence agencies see this as a deliberate campaign orchestrated by Moscow to undermine European support for Ukraine.
Germany’s Federal Criminal Police Office, the Bundeskriminalamt* (BKA), officially recorded 93 incidents classified as sabotage against transport networks in 2025. This figure marks a sharp acceleration compared to the 58 incidents reported in 2024 and the 78 offences registered in 2023. A notable finding in the investigation: twelve cases were formally classified as foreign intelligence agent activities. These cases confirm the use of local operatives to plant explosive devices or damage strategic railway tracks.
This method of operation reflects what strategists call hybrid warfare*—a strategy blending disinformation, cyberattacks, and targeted physical destruction beneath the threshold of open warfare. For European capitals, the primary challenge lies in attributing these attacks. Pinpointing the commanders within Russian intelligence services with certainty requires time and irrefutable technical evidence. Without such public proof, governments hesitate to trigger massive diplomatic or economic retaliation that could accelerate a direct confrontation with Moscow.
Understanding it
Hybrid warfare strikes a society without declaring war.
Picture a burglar who never kicks down the front door, but quietly loosens your car’s brakes or cuts the power at night. In geopolitics, hybrid warfare mixes cyber hacking, fake news, and physical sabotage outsourced to paid proxies. The aggressor aims to disrupt transport networks and foster fear among citizens, all while denying any involvement to avoid direct military retaliation.
Tensions reached a new high when the Kremlin issued an official warning to Western governments. Moscow threatened to use tactical nuclear weapons*—atomic bombs designed for battlefield use—should the Russian exclave of Kaliningrad be blockaded by neighboring countries. NATO Secretary General Mark Rutte called this nuclear rhetoric irresponsible, arguing that the public threat is intended to intimidate Europeans and distract from the military setbacks faced by the Russian army on the Ukrainian frontline.
Within the North Atlantic Treaty Organization, member states hold diverging views on how to respond. Poland and the Baltic States are calling for a firm collective response and public attribution of the sabotage acts to deter future clandestine operations. Other European partners, cautious not to cross the threshold into open conflict, favor discreet handling by national intelligence services. This internal division complicates efforts to forge a unified stance ahead of upcoming ministerial meetings in Brussels.
Understanding it
NATO’s Articles 4 and 5 govern collective solidarity.
The North Atlantic Treaty contains two key mechanisms. Article 4 allows a member state to convene an urgent meeting of all allies if it feels its territory or security is threatened. Article 5 goes much further: it establishes that an armed attack against one member is considered an attack against all, paving the way for a collective military response.
The critical deadline is set for October 15, 2026 at the meeting of NATO Defense Ministers. Allies will have to decide whether to classify these acts of sabotage as coordinated aggression or maintain a strictly defensive, law-enforcement response. Three paths now emerge for Europe: a firm political response through joint sanctions, the continuation of a low-intensity covert war of attrition, or an accidental escalation leading to open military confrontation.
Transport sabotage incidents in Germany (2025)93 increase compared to 2024 (58) and 2023 (78)
NATO Defense Ministers Meeting in BrusselsOctober 15, 2026 decision milestone on hybrid warfare
Les chiffres
Évolution du nombre d'incidents de sabotage contre les infrastructures de transport en Allemagne, selon le Bundeskriminalamt (BKA).
Source : Correctiv, 18 juin 2026, et News.de (DPA), 2026.
FavorableL'OTAN et l'UE dénoncent conjointement les sabotages et imposent des sanctions ciblées qui forcent Moscou à freiner ses opérations clandestines.
StableLes attaques sous faux drapeau continuent à bas bruit sans attribution officielle, installant une tension permanente gérée par la sécurité intérieure.
DégradéUn sabotage meurtrier contre une infrastructure civile pousse un allié à réagir, déclenchant une spirale de représailles militaires directes.
Favorable
25%
Unlikely
The Alliance attributes the sabotage and imposes coordinated sanctions
First scenario: Western nations decide to expose the clandestine operations. Faced with mounting police evidence and intelligence assessments, European governments and the Atlantic Alliance publish a joint report detailing the responsibility of Russian intelligence services. This diplomatic attribution is immediately accompanied by a new package of financial sanctions targeting logistics networks and middlemen involved in recruiting operatives. Critical infrastructure, particularly railways and energy terminals, sees a massive expansion of physical and digital surveillance. By showcasing political unity and detection capabilities without resorting to force, European democracies draw a clear red line that prompts Kremlin strategists to pause physical attacks to avoid losing access to their remaining economic footholds in Europe.
This diplomatic and security outcome remains a minority likelihood compared to the two other forward-looking paths, which together account for 75% of the probabilities. Unlike the status quo scenario where inaction encourages repeated vandalism, public attribution restores a deterrent balance of power without risking the direct confrontation feared in the escalation scenario. However, the effectiveness of this response hinges on the political will of major continental powers to shoulder heightened diplomatic friction with Moscow. If the EU-27 manage to agree on stringent sanctions at upcoming international summits, this strategic course could restore tangible security to European transport networks while curbing the risks of armed escalation.
Indicators affected
Sabotages des transports (Allemagne)Baisse progressive sous les 60 incidents↓93 incidents en 2025
Réunion OTAN à BruxellesAdoption d'un plan de sanctions conjointes↑15 octobre 2026
The France angleNational rail and energy network security is strengthened without direct military engagement. ↑ Rather favorable for France.
Stable
50%
Likely
Covert warfare continues as the new security standard
Second scenario: the silent conflict becomes a permanent fixture of European daily life. National authorities continue arresting paid operatives for arson or severed cables, but avoid directly accusing the Russian leadership to steer clear of forced military escalation. Handling these attacks remains entrusted to domestic intelligence agencies and police forces, who adapt surveillance protocols by tightening security around sensitive industrial sites. Disruptions across rail and maritime networks become frequent yet diffuse enough not to paralyze the continent’s economy. This security gray zone forces states to increase homeland protection spending without ever officially declaring the existence of coordinated foreign aggression, preserving a fragile surface peace.
Our assessment places this path at the forefront of our hypotheses with a dominant 50% probability, outpacing both the sanction-based resolution (25%) and an open military crisis (25%). This scenario reflects the historical reluctance of Western democracies to step into an overt confrontation with a nuclear-armed adversary. By absorbing isolated shocks without altering their defense posture, European countries avoid triggering mutual defense clauses, though at the cost of eroding public perceptions of security. This tense coexistence would become the operational standard if allies opt for caution during autumn ministerial deliberations, perpetuating an invisible war of attrition.
Indicators affected
Sabotages des transports (Allemagne)Stabilisation à un niveau élevé entre 80 et 100→93 incidents en 2025
Réunion OTAN à BruxellesRenforcement de la coopération policière sans attribution→15 octobre 2026
The France angleCritical infrastructure protection costs rise and police vigilance remains constant. ↓ Rather unfavorable for France.
Degraded
25%
Unlikely
A major incident triggers retaliation and military escalation
Third scenario: the strategy of indirect strikes spirals into a material and human disaster. An attack on a major rail switching hub, a hospital, or a strategic gas pipeline causes heavy civilian casualties in an Eastern European member state. Spurred by public outrage and the gravity of the strike, the affected country invokes Article 4 of the North Atlantic Treaty to demand immediate retaliatory measures. Russian denials are dismissed by public opinion, and allies deploy reinforced military patrols across the Baltic Sea and along eastern borders. The interception of an unidentified drone or the boarding of a suspicious vessel triggers an initial exchange of fire at sea, transforming a covert sabotage operation into a direct military confrontation between NATO and Russian armed forces.
This escalatory path remains limited to a 25% probability in our analysis, tied with the sanctions response scenario but well behind the prolonged status quo at 50%. Unlike the quiet management of intelligence agencies, human casualties would wipe out Western leaders’ diplomatic room for maneuver and make a visible response inevitable. The peril lies in the inability to control the subsequent stages of an armed standoff once the Kremlin brandishes its non-conventional arsenal. Should an act of sabotage accidentally breach allied military leaderships’ tolerance threshold, the crisis could swiftly slide into open confrontation with an uncontrollable outcome.
Indicators affected
Sabotages des transports (Allemagne)Flambée des attaques sur fond d'actes destructeurs majeurs↑93 incidents en 2025
Réunion OTAN à BruxellesActivation des plans de défense collective article 4↑15 octobre 2026
The France angleThe risk of French armed forces being drawn into a collective European engagement becomes immediate. ↓ Rather unfavorable for France.
Ordres de grandeur indicatifs pour les 3 scénarios ci-dessus, estimés avec l'information disponible à la publication et réévalués si la situation change — jamais des prévisions garanties. Learn more about our method →
Key takeaways
Is the surge in sabotage targeting European infrastructure the prelude to a collective NATO response, or will it remain contained in the shadows?
German authorities recorded 93 incidents of sabotage in 2025, amid Russian threats to deploy nuclear weapons if the Kaliningrad exclave is cut off.
No, the threshold for a military response has not been crossed: our most probable scenario (50%) anticipates ongoing hybrid warfare below the open conflict threshold, compared to coordinated sanctions (25%) and direct armed escalation (25%).
The main indicator to watch will be the NATO Defense Ministers meeting in Brussels on October 15, 2026, decisive for attributing the sabotage acts.
Moderately negative
Our assessment of the impact for France: moderately negative.the combined 75% probability of an infrastructure-wearing status quo and the risk of military escalation poses an ongoing security and budgetary threat to the country.
Si tu devais retenir 1 chose
Avec 93 incidents de sabotage recensés en 2025 par la police allemande, la guerre hybride s'installe durablement contre les transports européens.
Don't miss the next edition:
For those new to the topic
Quick glossary
Bundeskriminalamt
Germany’s Federal Criminal Police Office, responsible for investigating major crimes, terrorism, and espionage threatening national security.
hybrid warfare
A conflict strategy combining military and non-military means, such as cyberattacks, disinformation, and covert sabotage, to destabilize an adversary without formally declaring war.
tactical nuclear weapons
Atomic weapons of lower yield than strategic nuclear weapons, designed for use on a limited battlefield to achieve immediate military gains.