Hybrid pressure could test the Alliance without open war.
Vilnius | July 2026
Lithuanian President Gitanas Nausėda and Latvian President Edgars Rinkēvičs have warned that intelligence assessments indicate Russia may be preparing attacks against critical infrastructure in the Baltic states or Poland. The suspected targets include energy networks, transportation systems and facilities whose disruption could affect essential public services. The leaders emphasized that the information points to planning at senior levels in Moscow, although no precise timetable or confirmed location has been publicly disclosed.
Nausėda delivered the warning during a joint press conference with Rinkēvičs in Vilnius. He said Lithuania had strengthened protection around strategic energy and transportation assets after receiving information about possible physical attacks. The intelligence does not establish that Lithuania would necessarily be the direct target, but it suggests that NATO’s eastern flank faces a broader regional threat.
Rinkēvičs said information collected by several NATO countries demonstrates that Russia has already attempted different forms of sabotage against European states. He warned that Moscow could use limited or indirect operations to test how quickly the Alliance responds and whether its members remain politically united. Such a strategy would seek disruption without immediately crossing the clearly recognizable threshold of conventional war.
The presidents identified Estonia, Latvia, Lithuania and Poland as particularly exposed. All four countries belong to both NATO and the European Union, support Ukraine and occupy the geographical space separating Russia from the rest of northern and central Europe. Their energy systems, railways, ports, communications networks and border infrastructure have become increasingly important to regional defense.
Baltic governments have repeatedly accused Russian-linked actors of participating in cyberattacks, arson, surveillance and attempted sabotage. Polish authorities have also investigated incidents involving railway infrastructure and energy systems, including networks supporting the transportation of assistance to Ukraine. Moscow has consistently denied directing such operations.
The latest warnings do not amount to public proof that a specific attack has been authorized. The underlying intelligence has not been released, and independent observers cannot verify the operational details. The statements should therefore be understood as official security assessments rather than confirmation that an attack is imminent.
The Kremlin rejected the allegations. Spokesperson Dmitry Peskov described them as scare stories intended to portray Russia as a permanent enemy and justify further militarization of NATO’s eastern territories. Moscow argues that Baltic governments use security warnings to increase military spending and reinforce the presence of allied forces near Russia’s borders.
The dispute reflects the difficulty of interpreting hybrid threats. Conventional military aggression normally involves identifiable armed forces, territorial incursions and visible chains of command. Sabotage may instead be conducted through recruited intermediaries, criminal networks, cyber groups or individuals whose connection to a government is deliberately concealed.
This ambiguity creates a strategic advantage for the aggressor. A damaged railway, power station or communications cable can produce serious consequences while leaving governments uncertain about responsibility. The delay required to investigate attribution may prevent an immediate collective response and create disagreements among allies.
Rinkēvičs warned that Russia could indirectly test NATO’s Article 5, which treats an armed attack against one member as an attack against all. The provision remains the foundation of collective defense, but its application to cyber operations, sabotage and covert attacks depends on severity, attribution and political judgment. A limited incident may be designed precisely to exploit uncertainty about whether the threshold has been crossed.
An attack causing major casualties or prolonged national disruption would generate stronger pressure for collective action. A smaller incident involving infrastructure damage, temporary outages or deniable intermediaries could create a more complicated response. NATO would need to demonstrate unity without escalating automatically into a direct military confrontation.
Polish Prime Minister Donald Tusk had previously warned that different forms of escalation could emerge during the coming weeks and months. Warsaw has increased vigilance around strategic facilities while reinforcing its military posture near Belarus and the Russian region of Kaliningrad. Poland’s territory is essential for moving personnel and equipment toward the Baltic states.
The narrow Suwałki corridor connecting Poland and Lithuania has particular strategic importance. It provides the Baltic states’ principal land connection with the rest of NATO while lying between Kaliningrad and Belarus. Although the current warnings focus primarily on infrastructure rather than territorial invasion, disruption in this area could complicate regional reinforcement.
Energy security is another central concern. The Baltic states have reduced their historical dependence on Russian energy and integrated their electricity systems more closely with continental Europe. That transition has strengthened political independence but has also created infrastructure whose protection is essential to maintaining reliable power supplies.
Transportation networks carry similar significance. Railways, highways, airports and ports serve civilian populations while supporting NATO’s ability to move troops and equipment. Sabotage against one strategically selected component could produce consequences extending far beyond the immediate physical damage.
Undersea infrastructure remains vulnerable as well. The Baltic Sea contains electricity connections, telecommunications cables, pipelines and commercial shipping routes. Previous incidents involving damaged cables and pipelines have demonstrated how difficult it can be to monitor large maritime areas and establish responsibility rapidly.
Lithuania has responded by increasing security around critical facilities and dedicating an exceptional share of national resources to defense. Its military expenditure has reached approximately 5.33 percent of gross domestic product, one of the highest proportions within NATO. The government considers the investment necessary because Lithuania borders both Belarus and Russia’s Kaliningrad region.
Latvia and Estonia have also expanded defense budgets, border protection and civil-preparedness programs. Their governments encourage residents to prepare for emergencies involving electricity, communications or transportation failures. Such measures are intended to preserve national functioning even when an adversary targets civilian systems rather than military installations.
The warnings emerge while Russia’s war against Ukraine continues to shape European security. Baltic leaders argue that Moscow’s capabilities and intentions cannot be evaluated only through developments on the Ukrainian battlefield. Even without achieving all its objectives in Ukraine, Russia could apply pressure elsewhere through lower-cost operations that remain below the level of a full invasion.
Western governments have accused Russia of using hybrid activity to weaken public support for Ukraine, stretch domestic security services and create anxiety across Europe. These operations may include disinformation, cyberattacks, election interference and physical sabotage. The cumulative objective would be to make continued confrontation with Moscow appear economically and politically unsustainable.
Russia rejects the concept of a coordinated sabotage campaign and accuses NATO members of conducting their own hostile operations. This confrontation of competing narratives complicates deterrence because governments must communicate threats without presenting unverified intelligence as established fact. Excessive alarm could produce public fatigue, while insufficient warning could leave societies unprepared.
The immediate challenge for NATO is therefore defensive resilience. Governments must protect infrastructure, improve intelligence sharing and develop procedures for responding when attribution remains incomplete. Energy companies, transportation operators and telecommunications providers have become participants in national security because their systems may be the first targets in a hybrid confrontation.
Alliance credibility will also depend on political coordination. Moscow may calculate that disagreements among NATO members are more valuable than the physical destruction of a single facility. A coherent response to sabotage must demonstrate that covert methods cannot isolate smaller countries or divide allies over technical definitions.
The Baltic warning does not mean that war with Russia is inevitable. It indicates that regional leaders believe the contest may increasingly unfold through ambiguous actions directed against the systems supporting everyday life. In that environment, deterrence begins long before tanks cross a border.
NATO’s eastern members are preparing for a form of confrontation in which electricity, transportation and public confidence become strategic targets. Whether the intelligence assessments prove accurate remains unknown, but the vulnerability they describe is already shaping Europe’s security decisions.
Lo invisible también puede activar una guerra. / The invisible can also trigger a war.