Russia's Escalating Hybrid Campaigns in Europe
During the summer of 2026, Russia intensified its hybrid warfare efforts across Europe, adopting bolder and more extensive tactics. Notably, drones were deployed near critical sites such as gas platforms, airports, and defense factories, alongside cyberattacks targeting vital infrastructure within NATO member states. European governments have pointed to Moscow as responsible for these aggressive acts, which appear aimed at undermining support for Ukraine. Security officials note a pattern of increasing recklessness from Russian intelligence operations, testing NATO's limits and resolve.
Key incidents include the destruction of two drones by military divers off Romania’s coast on August 11 near a €4 billion energy project. On August 20, Romanian authorities scrambled two F-16 fighters to intercept a maritime drone approaching a Black Sea gas platform hosting hundreds of workers. German police discovered an armed drone at Leipzig airport in August, while NATO fighters shot down a drone entering Lithuanian airspace from Belarus. The U.S. Department of Justice has formally accused Russian intelligence of conspiring to finance terrorism and orchestrate assassinations across Europe.
In addition, two civilians lost their lives at the Ukraine-Moldova border checkpoint. Germany’s Interior Minister Alexander Dobrindt declared on September 1 that the country faces daily hybrid warfare tactics from Russia. August also saw an attempted arson at Estonia’s Milrem Robotics, following a 2024 attack on the home of Rheinmetall CEO Armin Papperger. Poland experienced cyberattacks targeting water supply systems, energy grids, hospitals, and damage to the railway connecting Warsaw to the Ukrainian border. A fire at WB Electronics was officially labeled sabotage.
European Nations Respond to Growing Threats
In response, Warsaw announced an expansion of its airspace defenses in September. Early that month, a man was arrested in the UK on charges of passing intelligence to Russian spies and plotting sabotage, amid a suspicious fire at former UK Labour leader Keir Starmer's residence. Russian submarines operated near critical infrastructure around the British Isles, with drones launched from shadow fleet vessels in UK and Irish waters during 2026, including during President Volodymyr Zelensky’s visit to Ireland.
Berlin committed to supplying Ukraine with additional Iris-T missiles and thousands of combat drones in September. German defense firm Hensoldt is ramping up perimeter surveillance at industrial sites and seeking authorization to engage hostile drones. Juha Räsänen, CEO of Finnish energy company Savon Voima, emphasized the challenge of achieving complete protection for power grids.
James Everard stressed, 'Combating so-called hybrid attacks is difficult in open societies, where attackers find it easier to operate.'
Highlighting the stakes, Kyastutis Budrys warned, 'This is no longer mere hybrid warfare; it is explosive and capable of causing harm. People could be injured or killed. If we fail to stop this, it will escalate.'
The surge in Russia’s hybrid assaults on critical European infrastructure signals a marked escalation in regional tensions. European countries are strengthening their defenses and deepening cooperation with NATO to safeguard security. These developments underline the necessity of unified efforts to counter emerging threats posed by Russian aggression. At the same time, the rising hostilities risk further conflict escalation, demanding vigilant international oversight.
The recent surge in hybrid warfare tactics by Russia highlights a broader strategy aimed at destabilizing Europe and pressuring Kyiv. This escalation is not just limited to physical attacks; it also includes significant airspace violations. For a deeper understanding of how these drone incursions over European territories are designed to exert pressure on Ukraine, read more in our detailed analysis here.