Russia-linked hybrid attacks grow more violent across Europe

More than 50 physical hybrid attacks in Europe over the past six months have been linked to Russia, according to an investigation by SVT and other European public service broadcasters.

The investigation identified 54 attacks or suspected plots between April 1 and October 15, 2026. It was conducted by journalists from SVT and 16 other broadcasters, working with the European Broadcasting Union’s Spotlight verification network.

The incidents include arson attacks, drones carrying explosives and Russian bombers flying dangerously close to NATO’s borders. Cyberattacks, influence operations and traditional espionage were not included.

Hybrid attacks are becoming more violent as those carrying them out take greater risks, according to the Hybrid CoE research institute in Helsinki.

“This is not a question of whether attacks will happen, but only when,” said Mikael Frisell, director-general of the Swedish Civil Defence Agency. He said Sweden needed to prepare for the worst, including bombings, attacks and sabotage of infrastructure.

The largest number of attacks in the period was recorded in Poland, Romania and Latvia. Sweden could also be targeted if Russia believes an attack would achieve its aims, according to the Swedish Armed Forces.

“There is a clear risk that this will spread to other countries in the Baltic Sea region,” said Carl-Johan Edström, chief of the Swedish Armed Forces’ Defence Staff. He said Russia appeared to be focusing on countries where attacks would have the greatest effect, but Sweden should also treat the threat as a clear risk.

Magnus Roglert, head of the Swedish police’s preparedness section, said the security situation in Europe and around the Baltic Sea had changed substantially in recent years.

SVT and the EBU previously investigated suspected Russian-linked hybrid attacks in Europe during 2024 and 2025, identifying 60 cases.