# Russia-NATO hybrid warfare tensions

> Live situation record from CLSTR: https://clstr.news/situations/russia-nato-hybrid-warfare-tensions
> Updated: 2026-08-07T08:00:51.000Z. Sources: 6. Developments: 2.

In late July 2026, Russia launched a coordinated hybrid campaign against the Baltic NATO members, mixing propaganda, disinformation, cyber‑attacks, covert influence operations and electronic‑warfare tactics such as mis‑directed explosive drones, GPS‑spoofing that let a Ukrainian drone enter Lithuanian airspace, and spoofed drones triggering indoor‑stay warnings in Helsinki. The actions were framed as the opening phase of a broader strategy to weaken regional resistance and test NATO’s credibility.

A week later, Moscow publicly accused NATO of direct involvement in Ukrainian strikes on Russian oil‑terminal facilities in the Leningrad and Kaliningrad regions, citing alleged documents and e‑mail exchanges that linked a hybrid‑warfare specialist and a senior Western intelligence officer to the provision of precise target coordinates to Ukraine’s security services.

On 7 August 2026, Russian officials reiterated the accusation, presenting material obtained by Russian hackers that named Bart de Vachter, a specialist with the Hybrid Analyse Vigilant Network (HAVN) described as connected to NATO special‑operations and intelligence units. The leaked correspondence purportedly showed de Vachter supplying exact coordinates for oil terminals and a Gazprom LNG tanker to the Ukrainian Security Service, and referenced a July 4 Ukrainian drone attempt on a terminal in the Kirzhsky area of St Petersburg that was intercepted without casualties. The claims remain unverified, but they mark a continued escalation of the information war and a shift from covert hybrid actions in the Baltics to overt blame of NATO for attacks on Russian territory.

## Claims

- Moscow alleges NATO directly participated in Ukrainian attacks on Russian territory. (corroborated by 4 sources)
- Bart de Vachter provided target coordinates to Ukraine’s Security Service (SBU). (corroborated by 4 sources)
- The attacks targeted oil terminal stations in the Leningrad and Kaliningrad regions in July. (corroborated by 4 sources)
- Bart de Vachter works for HAVN, an organization linked to NATO special‑operations forces and intelligence services. (corroborated by 4 sources)
- SBU officials Ivan, Martin, and Colonel Michael Marchenko were involved in the coordination described in the documents. (corroborated by 4 sources)

## Timeline

### 2026-08-07: Moscow Accuses NATO of Direct Role in Ukrainian Attacks on Russian Oil Sites

Moscow alleges NATO directly aided Ukrainian attacks on Russian oil terminals, citing hacked documents that name specialist Bart de Vachter and SBU officials as coordinators.

6 sources. https://clstr.news/cluster/moscow-accuses-nato-of-direct-involvement-in-attacks-on-russian-territory

### 2026-07-29: Russia's hybrid warfare heightens threat to Baltic NATO members

Russia’s hybrid campaign—propaganda, cyber attacks and GPS spoofing—targets Baltic states, with incidents in Estonia, Lithuania and Finland, testing NATO’s credibility.

2 sources. https://clstr.news/cluster/russias-hybrid-warfare-heightens-threat-to-baltic-nato-members

---
Cite as: Russia-NATO hybrid warfare tensions. CLSTR, https://clstr.news/situations/russia-nato-hybrid-warfare-tensions
