BY Rosemary

Latvia’s State Security Service said Wednesday that two individuals acting on behalf of Russian interests carried out an arson attack on railway infrastructure last summer, setting fire to a train and key equipment used to control rail traffic in what authorities describe as part of a broader campaign of sabotage targeting European infrastructure.

According to the security agency, the incident occurred in August and involved the deliberate burning of a train along with several railway relay cabinets. These cabinets contain technical systems responsible for coordinating train movements and ensuring safe operations across the rail network. Damage to such equipment can disrupt rail traffic, delay transportation and compromise the safety of railway systems.

Investigators said the suspects also recorded video footage of the attack while it was taking place. The footage was later transmitted to the individuals who had commissioned the operation. Authorities say the material was subsequently used in a propaganda effort designed to mislead viewers by presenting the incident as an attack that occurred inside Ukraine.

Latvian officials believe the act was orchestrated to contribute to a wider disinformation campaign while also demonstrating the vulnerability of infrastructure within European countries that support Ukraine. Security officials said the suspects were operating in the interests of Russia, although further details about their identities or how they were recruited have not been publicly disclosed.

The attack fits into a broader pattern of sabotage and hostile activity that Western governments say has intensified since Russia launched its full-scale invasion of Ukraine in February 2022. Security agencies across Europe have increasingly warned about covert operations targeting transportation networks, energy infrastructure and digital systems.

Investigations by Western officials have identified at least 151 incidents of sabotage, attempted sabotage or other malign actions across Europe since the start of the war. These activities include arson attacks, cyber intrusions, disinformation campaigns and physical interference with critical infrastructure systems.

Authorities say the objective behind such operations is multifaceted. In addition to disrupting essential services, the incidents are believed to be intended to undermine European support for Ukraine, create anxiety among populations and strain law enforcement and intelligence resources as governments scramble to identify and counter the threats.

Officials also note that many operations appear to rely on intermediaries or proxies rather than direct involvement by Russian operatives. In some cases, individuals accused of carrying out attacks claim they were unaware they were acting on behalf of Moscow, having been recruited online or through criminal networks with little understanding of the broader geopolitical context.

The sabotage described by Latvian authorities is not the only incident involving railway infrastructure. In November, Polish officials accused Russian intelligence services of orchestrating acts of sabotage along a rail corridor used to transport military aid and supplies to Ukraine. That route has become a critical logistical artery for Western support heading toward the front lines.

Poland has also reported a series of cyberattacks targeting essential energy infrastructure. In January, Prime Minister Donald Tusk said that hackers directly connected to Russian intelligence services had launched attacks against two combined heat and power plants that provide heating to nearly half a million customers. Several wind and solar energy facilities were also targeted in the same campaign.

Similar incidents have been reported in other parts of Europe, highlighting concerns about the vulnerability of infrastructure systems that rely heavily on digital controls.

In Denmark, authorities said cyberattacks conducted by Russia during 2024 targeted a water utility network. The disruption temporarily left some households without water, underscoring how digital intrusions can translate into real-world consequences for civilians.

Norwegian officials reported another alarming episode in August, when police said pro-Russian hackers remotely accessed systems controlling a dam and opened a valve that released large quantities of water. While the incident did not result in significant damage, investigators said it demonstrated how cyber operations can produce direct physical effects.

Security analysts say these types of incidents illustrate a growing shift in tactics. Ciaran Martin, the former head of the United Kingdom’s National Cyber Security Centre, has warned that Russia appears to be adopting a more aggressive posture toward European countries that it views as hostile.

Part of this strategy involves what experts call “cyber-kinetic” operations. In these cases, hackers manipulate digital systems controlling physical infrastructure, changing operational variables in ways that produce tangible outcomes such as altering water flow, disrupting electricity supply or interfering with transportation networks.

Authorities in Italy are currently investigating sabotage that targeted several high-speed railway lines on the opening day of the Milan-Cortina Winter Olympics in February. Reports indicated that sections of infrastructure were burned or physically damaged, causing widespread disruption and affecting thousands of rail passengers.

Italy’s foreign minister, Antonio Tajani, said the country also faced a wave of cyberattacks linked to Russia during the Olympic period. The attacks reportedly targeted websites associated with the Winter Games, hospitality services in the Cortina region and digital platforms connected to the foreign ministry.

France has experienced similar incidents. In 2024, high-speed railway lines were sabotaged on the opening day of the Summer Olympic Games, creating major delays across the national rail network. Although the damage forced temporary disruptions to travel, authorities have not publicly attributed responsibility for the attacks.

Neither Italian nor French officials have formally accused Russia of carrying out those particular acts of sabotage, though investigators have continued examining possible links.

The Kremlin has repeatedly rejected accusations that it is orchestrating a coordinated campaign of sabotage across Europe. Russian officials have dismissed such claims as politically motivated allegations by Western governments seeking to portray Moscow as a destabilizing force.

Despite those denials, European intelligence services say the pattern of attacks, cyber intrusions and disinformation efforts suggests a sustained campaign designed to test the resilience of infrastructure systems and create pressure on governments supporting Ukraine.

The arson attack uncovered in Latvia now adds to growing concerns among European security agencies that critical infrastructure — from railways and power plants to water systems and digital networks — could increasingly become targets in the wider geopolitical confrontation stemming from the war in Ukraine.

Original article