Adversary Intelligence — 2026-10-04

Ukrainian Database Documents 522 GRU-Led Clandestine Attacks Across Europe Since 2022 Showing Escalating Pace and Severity of Operations

BLUFMoscow's accelerating sabotage campaign across Europe is outpacing allied governments' ability to attribute and deter it, eroding the credibility of NATO's response framework.

The Kyiv-based Sahaidachnyi Security Center's tracker has logged 522 incidents in Europe since February 24, 2022 that European governments attributed to Moscow or that fit the pattern of Russian operations 12. National Security News reported that 100 incidents were officially attributed to Russia from January to August, against 60 in the same period of 2025, and that a senior NATO official put the true 2026 figure above 200 excluding cyber 1. Ukrainian military intelligence (HUR) stated on October 2 that Russian services were tasked with increasing activity in the EU and NATO states, using GRU- and FSB-recruited agents against military facilities, infrastructure and Starlink stations 3. Poland's digital minister said a September 23 fire at an Exatel Starlink ground station may have been deliberate, though the investigation is unfinished 3. Kremlin spokesman Dmitry Peskov called such claims "scare stories" in August 2.

Analysis
Russian services are pursuing a deliberate, GRU-led campaign that is escalating in tempo and in willingness to cause physical harm, not random harassment. Ukrainian military intelligence says its services have been tasked with raising activity, naming military sites, infrastructure and Starlink stations as targets, and Poland's unfinished Exatel fire inquiry is the nearest test of that warning. The count rests on a single primary source, the Sahaidachnyi tracker, which outlets amplify without independent verification. It may also be inflated by counting events that merely fit the Russian pattern, and Kyiv has an interest in stressing the threat to sustain Western support. Slow attribution, often weeks or longer, preserves the deniability the campaign relies on.

4 sources

Russia clandestine war in Europe: what 522 clandestine attacks tell us about Moscow hostile intentions - National Security News
Map Shows Russia's Sabotage Attacks on Europe Since Start of Ukraine War - Newsweek
Russia planning to increase 'hybrid warfare' activity in Europe, Ukrainian intelligence warns - Kyiv Independent
The Everywhere War - Sahaidachnyi Security Center