Allied Intelligence — 2026-04-15

Sweden Reveals Pro-Russian Hackers Attempted Destructive Cyberattack on Thermal Power Plant

Sweden's Civil Defense Minister Carl-Oskar Bohlin disclosed that hackers linked to Russian intelligence services attempted a destructive cyberattack against a Swedish thermal power plant in 2025, targeting operational technology systems that control physical infrastructure. The minister warned that pro-Russian groups have escalated from simple denial-of-service attacks to destructive cyber operations against European critical infrastructure, marking a shift in Russian hybrid warfare tactics.

Analysis
The public attribution is itself the signal. European intelligence has warned of this DDoS-to-OT escalation for years without naming incidents, making Bohlin's disclosure the rare confirmation that consequence risk has shifted from data loss to kinetic damage on heat, pressure, and flow systems. That disclosure almost certainly targets upcoming Swedish and NATO cyber defense funding requests in the coming weeks, though the framing may be driven more by domestic defense-spending politics, with "destructive" overstating a probing operation that did not achieve its objectives.
3 sources
  1. Sweden foiled pro-Russian cyberattack on thermal power plant in 2025, minister says - Euronews
  2. Sweden says pro-Russian hackers attempted to breach thermal power plant - The Record
  3. Sweden blames Russian hackers for attempting destructive cyberattack on thermal plant - TechCrunch

View in full brief →

UNCLASSIFIED // OPEN SOURCE