Lithuanian intelligence services previously attributed an October 2023 campaign of false bomb threats against 1,500 schools and kindergartens in Lithuania to Russia

Overview Debates Related claims Topics Sources

Under the approved reform legislation, Germany's foreign intelligence agency Bundesnachrichtendienst is granted expanded operational authority to conduct cyberattacks and sabotage against adversary infrastructure abroad

Under the approved reform legislation, Germany's domestic intelligence agency Federal Office for the Protection of the Constitution is authorized to execute technical intervention measures inside Germany, including deleting stolen data from adversary servers

Körber-Stiftung programme director Florian Bigge cited Russian sabotage, cyberattacks, and declining United States intelligence sharing as primary catalysts for expanding German spy agency powers

German authorities accused Russia of attempting an August 2026 attack after finding an explosive-laden drone incorporating Russian technology near an Antonov Airlines plane at Leipzig-Halle airport

Bundesnachrichtendienst chief Martin Jaeger warned that Russia is conducting a shadow war against Germany using drones, espionage, sabotage, and disinformation

Following Germany's accusations over the Leipzig-Halle airport drone incident, Germany closed Russia's Bonn consulate and Berlin cultural center, while Russia closed a German consulate in St. Petersburg and the Goethe-Institut

Hacker groups Belarusian Cyberpartisans and Silent Crow launched a cyberattack targeting Rosstat's IT infrastructure between October 29 and November 1, 2026

Following the cyberattack between October 29 and November 1, 2026, Rosstat reported disruptions to its services and extended deadlines for submitting statistical data

Rosstat acknowledged experiencing cyberattacks between October 29 and November 1, 2026, but denied that its databases had been compromised or that information had been leaked

Antonio Tajani stated that pro-Russian cybercriminals targeted him because of the Italian government's transparent political support for the freedom, democracy, and sovereignty of Ukraine

Italian Foreign Minister Antonio Tajani announced on November 7, 2026, that cybercriminals had published his personal data on the dark web, with officials saying hackers were attempting to buy additional details about him and his family

The cyberattack on Antonio Tajani that leaked his data on the dark web occurred alongside broader hybrid disruptions across Europe, including hoax bomb threats causing flight diversions, broadcaster security alerts, and attacks on supermarket refrigeration systems

Italian cybersecurity authorities discovered Antonio Tajani's details on a dark web page accessible via the Tor network, where Antonio Tajani was listed among 18 citizens hostile to the Russian Federation

Italian Prime Minister Giorgia Meloni attributed the leak of Antonio Tajani's personal data to pro-Russian hackers, calling the offering of government officials' confidential data for sale a matter of grave concern

Italian law enforcement and government officials reported a rise in cyberattacks by groups sympathetic to Russia, targeting various European entities including funeral homes and supermarket freezers

Dark web listings monitored by Italian officials included requests for personal information on other Italian figures deemed hostile to Russia, including a prosecutor, a police official, a mayor, and cybersecurity experts

European security officials and analysts noted the flight threats of November 5, 2026 coincided with cyberattacks on European supermarket refrigeration systems and blood banks during the same week

European officials have previously accused Russia and Iran of conducting hybrid attacks in Europe, though both governments deny any involvement in these hybrid attacks

Kremlin spokesperson Dmitry Peskov described accusations of Russian involvement in the November 5, 2026 European cyberattacks and flight disruptions as absurd and baseless

European officials and analysts pointed to potential Russian or Iranian hybrid warfare operations, though official sources made no formal attribution and both Moscow and Tehran deny conducting such hybrid warfare operations