EU prepares crisis response plans for potential mass-casualty Russian hybrid attacks

Contingency planning in Brussels

European Union ambassadors from all 27 member states have held closed-door discussions in recent weeks to prepare for potential mass-casualty Russian hybrid attacks. The meetings took place in a restricted format without mobile phones or staff assistants present. Discussions focus on establishing protocols should covert Russian sabotage operations cause deaths among European citizens. EU officials have evaluated emergency measures, including deploying civilian rapid-response teams, unlocking emergency community funding for affected nations, and coordinating public statements from EU leadership during a crisis. European Commissioner for Justice Michael McGrath outlined the push to improve institutional readiness across the bloc.

European democracies are facing a growing number of threats. We are strengthening our capacity to anticipate and detect threats, improve the early warning system and ensure that Europe can respond quickly and collectively when our democratic resilience is tested.

Escalating sabotage and hybrid operations

The confidential talks accelerated following several security incidents across member states, including the discovery of an explosives-laden drone at Leipzig airport in August, which German authorities attributed to Russia. European authorities also recorded a fire at a Polish Starlink ground communications station and attempts to place incendiary devices in air freight shipments across the EU and the United Kingdom. On 6 October 2026, Bulgarian authorities reported sailors missing after their commercial vessel sank following drone attacks in the Black Sea.

Teija Tiilikainen, director of the European Centre of Excellence for Countering Hybrid Threats, noted that Russian tactics increasingly push past conventional gray-zone operations.

It is quite obvious that when Russia uses increasingly lethal tools to test our readiness and our willingness to adopt countermeasures, at some point there will be casualties. Sooner or later, intentionally or not, this is what happens.

Institutional friction and NATO overlap

The planning initiative has generated disagreement among European capitals regarding the division of responsibilities between the EU and NATO. Several member states argue that the European Commission risks duplicating core military and intelligence functions of the North Atlantic alliance, potentially slowing crisis decision-making when speed is required. Former NATO spokesperson Oana Lungescu proposed that NATO maintain responsibility for intelligence sharing and military deterrence, while the EU restricts its mandate to economic aid and civil protection.

There is a risk of creating great chaos at all decision-making levels, which will delay response time.

Information security and emergency protocols

Diplomats have also raised concerns over internal information security and the lack of end-to-end encrypted communication networks across EU institutions. Officials from eastern flank states expressed hesitation about sharing intelligence in ambassadorial meetings, citing past leaks and risks that sensitive details could reach Moscow. In response, European Commission President Ursula von der Leyen proposed establishing an emergency security protocol. The mechanism is scheduled for inclusion in the updated European Security Strategy in November 2026, though some member states express skepticism, arguing that drafting new protocols could take months while potentially duplicating the existing Integrated Political Crisis Response framework.