Allied Intelligence — 2026-08-20

CRS Reports Escalating Russian Intelligence Operations Across Europe Including Sabotage and Assassinations

BLUFMoscow's forced pivot to expendable proxy operators inflates European incident tallies while masking a net decline in operational sophistication that Congress must separate from volume when scoping oversight authorities.

A CRS report published August 11 documents at least 151 incidents of reported Russian hybrid warfare operations across Europe from February 2022 through March 2026, with one study finding attack volume quadrupled from 2023 to 2024 12. The report attributes activity to three agencies: the SVR, the GU/GRU, and the FSB, identifying the GU/GRU as the most aggressive and linked to sabotage and assassinations 1. CRS cites country-specific incidents including 30 energy-facility attacks in Poland in December 2025, 29 unauthorized drone incursions in Romania since 2022, and GPS jamming affecting Romania and Bulgaria in the Black Sea 2. The report also cites UK domestic intelligence agency MI5's estimate that European governments expelled at least 750 Russian diplomats and suspected intelligence officers between 2022 and 2024, and notes Russian agencies have since turned to contracted proxies and for-hire agents to sustain operations 1.

Analysis
The CRS report published August 11 aggregates already-documented GU/GRU sabotage and assassination activity into a legislative baseline rather than a new intelligence finding, with sourcing resting on that single congressional document, republished by USNI News and summarized secondhand by Legis1 and InsideDefense.com, so multi-outlet coverage reflects amplification rather than independent corroboration. The emphasis on contracted proxies indicates Moscow is trading operational security for expendable, lower-skill assets after European services expelled roughly 750 diplomats and suspected officers since 2022, a substitution that inflates raw incident counts while diluting average operational sophistication. Aggregating SVR, GU/GRU, and FSB activity under one "hybrid warfare" total may overstate centralized Kremlin coordination rather than parallel, loosely synchronized service-level operations, a distinction Congress will need to weigh separately from attack tallies when drafting oversight legislation like H.R. 7632 and the pending hybrid warfare coordinator provisions.
5 sources
  1. Russian Hybrid Warfare Activities in Europe: Considerations for Congress - Congressional Research Service
  2. Russian Operations in Europe Outpace Policy, CRS Says - Legis1
  3. Report to Congress on Russian Hybrid Warfare in Europe - USNI News
  4. CRS report on Russian hybrid warfare activities in Europe - InsideDefense.com
  5. Russian Hybrid Warfare Activities in Europe: Considerations for Congress - Congressional Research Service

View in full brief →

UNCLASSIFIED // OPEN SOURCE