BRUSSELS, September 4 — Against this backdrop of a continent on edge, European security officials are bracing for what they describe as a coordinated sabotage campaign attributed to Russia, a wave of undersea cable cuts, arson attacks, and attempted bombings that has redrawn the threat map for critical infrastructure across the region. The incidents, which unfolded from late 2024 into 2025, have forced NATO and European governments into a posture of heightened vigilance.
In December 2024, the Estlink 2 power cable running between Finland and Estonia was damaged, stoking suspicions of external interference. That was followed in February 2025 by a series of arson attacks on commercial properties across the Baltic states, and in March 2025, a package bomb detonated at a logistics facility in the United Kingdom, injuring workers.
A drone spotted over a critical energy facility in Germany in April 2025 prompted a temporary shutdown of the site.
A Pattern of Hybrid Warfare
European intelligence agencies — including those of Germany, the United Kingdom, and the Baltic states — have publicly pointed the finger at Russian military intelligence, or GRU, and other Russian-linked operatives, citing intercepted communications and forensic evidence. In May 2025, the European Union formally accused Russia of waging a “hybrid war” against member states, and NATO responded by announcing an increase in naval patrols in the Baltic and North Seas. Russia has denied any involvement, dismissing the accusations as “baseless provocations.” The campaign has done more than raise alarms.
Trade has been disrupted, and repair costs are now estimated at over €100 million, or about US$108 million, a figure that European leaders say reflects only the direct damage, not the broader economic ripple. The undersea fiber-optic cable cuts in the Baltic Sea, which struck in late 2024 and early 2025, disrupted communications between several countries and exposed the fragility of the region’s digital backbone.
In the corridors of European security establishments, the concern is escalation. Officials warn that transportation networks and communication systems could be the next targets, and cybersecurity and counterintelligence efforts have been intensified across the continent in response. As of the latest reports in June 2025, no arrests have been made in most cases, though investigations remain ongoing.
What is at stake, in the wider picture, is the resilience of European unity itself; leaders have called for solidarity even as they acknowledge that the threat may not recede anytime soon. The coming months will test whether the continent’s defensive measures can keep pace with a shadow campaign that has already proven it can reach into the heart of Europe’s infrastructure.
