Danish intelligence warns of concrete Russian sabotage planning targeting defense firms linked to Ukraine aid
Denmark's Security and Intelligence Service (PET) publicly warned that Russian intelligence services are conducting concrete planning of sabotage operations against Danish defense-industry companies, particularly those linked to military aid to Ukraine. PET head of counterintelligence Emil Græsholm said Russian services are also recruiting ordinary Danish citizens through social media and gaming platforms to carry out preparatory tasks, sometimes without the recruits knowing they are working for Moscow.
Key points
- PET says Russian intelligence services are at the concrete planning stage for sabotage on Danish territory.
- Primary targets are Danish defense-industry companies linked to military aid to Ukraine.
- Russia is recruiting ordinary Danish citizens via social networks and online/gaming platforms for tasks including photographing or filming companies and infrastructure.
- Recruited citizens often do not realize they are working for Russian intelligence, according to PET.
- PET identified arson as one possible sabotage tactic and called on Danish defense firms to strengthen security measures.
- Græsholm said PET went public because the targeting and preparation are unusually specific; the service expects the threat to grow in scale and complexity.
- The Danish warning follows Germany's 1 September accusation that Russia carried out a drone-sabotage attempt at Leipzig/Halle airport, and similar suspected incidents in Poland, Sweden and Slovakia.
Why it matters
PET's decision to go public is unusual for the normally discreet Danish service and signals an assessment that the sabotage planning is concrete and imminent. Because the named targets are defense firms tied to arms deliveries to Ukraine, the warning directly connects the threat to disruption of Western military aid. The use of online recruitment of citizens who may not realize they are working for Moscow also marks a broadening of Russia's hybrid tactics. The Danish alert comes amid a string of suspected Russian sabotage incidents across Europe, suggesting a coordinated campaign aimed at Ukraine's military supply chain.
What happened
Denmark's Security and Intelligence Service (PET) issued a rare public warning that Russian intelligence services are carrying out concrete planning of sabotage on Danish territory. PET head of counterintelligence Emil Græsholm said the priority targets are defense-industry companies in Denmark linked to military aid to Ukraine. According to PET, Russian services are recruiting ordinary Danish citizens through social media and online or gaming platforms, and asking them to photograph or film companies and infrastructure for use in planning sabotage. Græsholm said recruited citizens often do not realize they are working for Moscow, and warned that the threat is directed both at Ukrainian defense manufacturers in Denmark and at Denmark's broader defense industry. He named arson as one possible sabotage tactic and urged Danish defense companies to strengthen their security measures, adding that PET expects the threat to continue growing in scale and complexity.
How Ukrainian sources describe it
All seven source articles are Ukrainian outlets, and they uniformly frame the Danish warning through the lens of Ukraine's military-aid supply chain. They present Russia's recruitment of Danish citizens as part of a broader Russian effort to halt specific defense deliveries to Ukraine and deter further Western support. The coverage is explicitly tied to recent alleged Russian sabotage acts across Europe — the Leipzig/Halle drone incident in Germany, a fire at a Polish drone plant that PM Donald Tusk called sabotage, Sweden's National Security Council meeting and a foiled arson attempt in Slovakia — to portray a coordinated Russian hybrid campaign targeting aid to Ukraine.
Background
Denmark has supplied weapons and expanded its own defense industry to support Ukraine, making Danish defense companies a logical target for Russian sabotage. PET head of counterintelligence Emil Græsholm has identified arson as one of the possible sabotage scenarios and urged Danish defense firms to strengthen security. On 1 September 2026, Germany publicly blamed Russia for a hybrid attack at Leipzig/Halle airport involving a drone carrying explosives near a Ukrainian An-124 transport aircraft and announced countermeasures including the closure of the Russian consulate general in Bonn and the 'Russisches Haus' in Berlin. Sweden subsequently convened its National Security Council to assess similar threats, Polish Prime Minister Donald Tusk said a fire at a Polish drone plant was sabotage, and Slovak police reported preventing an arson attempt at a drone factory.