Norway's PST raises sabotage threat assessment, warns of possible Russian attacks in 2027
Norway's security service PST has raised its assessment of the sabotage threat, saying the danger grew substantially during 2026. The agency expects Russian intelligence to attempt sabotage in Norway in 2027 but says it has so far detected no sabotage attempts against Norwegian targets. Defence companies, logistics firms and critical infrastructure are identified as the most likely targets.
Key points
- PST raised its assessment of the sabotage threat in Norway and says it grew substantially during 2026.
- No sabotage attempts against objects in Norway have been detected so far.
- Russia-linked actors reportedly collected information about Norwegian infrastructure and potential targets.
- PST expects Russian intelligence to attempt sabotage in Norway in 2027.
- The most likely targets are defence companies, related service providers and logistics firms.
- Critical infrastructure, including energy facilities, is also viewed as potentially at risk.
- PST cites arson, explosives and drones as methods used in sabotage operations.
Why it matters
The warning points to a rising risk of sabotage in Norway and brings the prospect of attacks on defence companies, service providers and critical infrastructure into focus. It could also affect Norway's defence-support cooperation with Ukraine as well as domestic security and the continuity of public services.
What happened
PST announced that it had raised its assessment of the sabotage threat in Norway, noting that the danger had grown substantially over 2026. The service said it knew of Russia-linked actors collecting information about Norwegian infrastructure and potential targets, but had not detected any sabotage attempts against targets in the country. The most likely targets are defence companies, businesses supplying them, including logistics firms, and critical infrastructure such as energy facilities. PST Director for State Threats Inger Gaugland said there were grounds to expect Russian intelligence to attempt sabotage in Norway in 2027. The agency also reported that, after a decline in 2025, the number of sabotage operations in Europe was rising again, with arson, explosives and drones among the methods used. PST noted that most recruitment operations involve recruited intermediaries who may not know they are acting in the interests of a foreign state, and urged citizens and companies to report suspicious cases to law enforcement.
How Ukrainian sources describe it
Ukrainian coverage emphasises that Norway's support for Ukraine and its defence-sector cooperation make Norwegian defence and logistics companies potential targets. It also highlights the hackers' stated motive: retaliation for Norway's support of Ukraine and a strategic partnership agreement.
How international sources describe it
The international framing centres on PST's assessment of the rising sabotage threat, alleged Russian intelligence reconnaissance in Norway, the sectors most exposed and the absence of detected sabotage attempts in the country. Broader European incidents involving drones, suspected agents, cyberattacks and sabotage are presented as evidence of a wider increase in operations.
Background
PST cited a rise in sabotage operations across Europe after a decline in 2025. In August, the pro-Russian hacker group Server Killers attacked the Norwegian Agency for Digitalisation, causing a three-day disruption to government services and a leak of budget data; the hackers said the attack was retaliation for Norway's support of Ukraine and a strategic partnership agreement. Germany previously accused Russia of a drone attack on Leipzig/Halle Airport, while recent arrests in Germany and Poland involved suspected Russian intelligence activity.