Danish intelligence warns Russia could pose threat to NATO within two years, assesses low but growing risk of limited military attack
New assessment outlines timeline for Russian capabilities and details potential hybrid escalation including cyberattacks and sabotage with casualties.
Quick summary
Denmark's Defence Intelligence Service has warned that Russia could pose a credible threat to one or more NATO countries within approximately two years and could be capable of waging a local war in a neighbouring country within approximately six months. The assessment describes a low but growing risk of a limited Russian military attack against one or more NATO countries bordering Russia. Multiple outlets report the intelligence service warned Russia's hybrid warfare could include destructive cyberattacks affecting critical societal functions and sabotage carrying a high risk of casualties. The assessment also raised the possibility of limited strikes or a false-flag operation against a NATO country, while describing a full-scale invasion as highly unlikely.
Key points
- Danish intelligence provides a timeline: Russia could wage local war in neighbouring country within six months, pose credible threat to NATO within two years
- Assessment warns of low but growing risk of limited Russian military attack on NATO countries bordering Russia
- Potential hybrid escalation includes destructive cyberattacks on critical infrastructure and sabotage with high casualty risk
- Intelligence service raises possibility of limited strikes or false-flag operations against NATO countries
- Full-scale invasion described as highly unlikely despite escalating hybrid threats
How it unfolded
- New
The encounter
A Russian frigate fires two flares toward a Danish military helicopter over international waters near Gedser. One passes close to the aircraft.
- New
First reports
Danish outlet Ekstra Bladet breaks the story. Denmark's Defence Command issues an official statement later the same day.
- New
Denmark confirms the incident
Danish officials publicly confirm the account and describe the encounter as serious and unprecedented for Denmark.
Show 18 more eventsHide earlier events
- New
Russia's ambassador is summoned
Copenhagen summons the Russian ambassador — the first formal diplomatic step.
- ChangedContested
International coverage picks it up
Reuters, AP and other international outlets carry the story, and the framing begins to diverge from the Danish statement it is all sourced to.
- New
Russia has not responded
No public comment or competing account from Moscow, which leaves the Danish version as the sole source for every report so far.
- New
Russia responds and disputes Danish account
Russia's ambassador accuses Danish helicopters of dangerous manoeuvres near Russian warships, hands Copenhagen a formal note, and says Moscow is investigating.
- New
Denmark's leaders condemn the incident
Prime Minister Mette Frederiksen calls the Russian action reckless and aimed at intimidation; Foreign Minister Lars Løkke Rasmussen calls it absolutely unacceptable.
- New
NATO calls the flare firing irresponsible
NATO issues a statement labeling the firing of flares toward the Danish helicopter an irresponsible act by Russia.
- NewContested
Debate over whether incident is an 'attack'
A military analyst at the University of Copenhagen argues the incident does not constitute an attack under international law because no weapons were used, highlighting definitional debate.
- New
Denmark speeds up Ukraine aid package in response
Copenhagen announces it is accelerating a planned military aid package to Ukraine directly in response to the flare incident.
- New
Danish helicopter identified as AS550 Fennec
The helicopter is identified as a Royal Danish Air Force AS550 Fennec conducting routine photographic identification.
- New
Russia decorates commander of the corvette
Russia formally awards the commander of the corvette Soobrazitelny, endorsing the flare launch as preventing a provocation.
- New
Russian vessel identified as Soobrazitelny
Russian authorities publicly identify the vessel as the corvette Soobrazitelny.
- NewContested
Russia claims helicopter did not respond to radio calls
Moscow says the Danish helicopter did not respond to calls on international channels, conflicting with Denmark's account that the frigate gave no radio warning.
- Changed
Denmark delivers accelerated Ukraine aid package
Copenhagen has delivered the 1.8 billion kroner military aid package to Ukraine, both accelerated and increased in direct response to the flare incident.
- New
Analysts describe Russia as taking more risks in Baltic
Experts characterise Russia as increasingly irritated and willing to take more risks with its warships and shadow fleet, framing the incident as part of a broader pattern of pressure on NATO states.
- New
Denmark formally announces Ukraine aid package
Denmark's Ministry of Foreign Affairs formally announces military donation package no. 31 for Ukraine, worth approximately 1.8 billion kroner, confirming the accelerated aid package following the flare incident.
- New
Danish intelligence warns of escalating hybrid warfare
Denmark's defence intelligence service issues an assessment warning that Russia is expected to escalate hybrid warfare against NATO countries in the coming months.
- New
NATO commander reports increased intelligence sharing
NATO's top commander describes increased intelligence sharing among allies amid concerns over Russian activity in the region.
- New
Danish intelligence provides timeline for Russian threat to NATO
Denmark's Defence Intelligence Service assesses Russia could be capable of waging local war in neighbouring country within approximately six months and could pose credible threat to one or more NATO countries within approximately two years.
- New
Assessment warns of low but growing risk of limited attack
Danish intelligence describes a low but growing risk of a limited Russian military attack against one or more NATO countries bordering Russia.
- New
Details of potential hybrid escalation revealed
The Danish assessment warns Russia's hybrid activity could include destructive cyberattacks affecting critical societal functions and sabotage carrying a high risk of casualties. It also raises the possibility of limited strikes or a false-flag operation against a NATO country.
- New
Full-scale invasion deemed highly unlikely
Despite warnings of escalating hybrid threats, Denmark's intelligence service describes a full-scale Russian attack as highly unlikely.
Claim tracker
26 confirmed · 3 contested · 1 unverified
- Contested
The incident is part of a wider Russian hybrid-warfare campaign against NATO states.
- Contested
The incident does not constitute an attack under international law because no weapons were used.
- Contested
The Russian frigate gave no radio warning before firing flares.
- Unverified
Russia is increasingly irritated and willing to take more risks with its warships and shadow fleet in the Baltic.
Show 26 more claimsShow fewer claims
- Confirmed
A Russian frigate fired two flares toward a Danish military helicopter near Gedser on September 14.
- Confirmed
One flare passed close to the aircraft; no crew were injured and the helicopter was not damaged.
- Confirmed
Denmark summoned Russia's ambassador following the incident.
- Confirmed
This is the first incident of its kind involving Denmark.
- Confirmed
The Russian vessel involved has been identified.
- Confirmed
Russia accuses Danish helicopters of dangerous manoeuvres near its warships.
- Confirmed
Russia handed Denmark a formal diplomatic note complaining about the helicopter encounters.
- Confirmed
Russia is investigating the incident.
- Confirmed
NATO called the flare firing an irresponsible act by Russia.
- Confirmed
One flare passed within a matter of metres of the helicopter.
- Confirmed
Denmark is speeding up a planned military aid package to Ukraine in direct response to the flare incident.
- Confirmed
Russia has formally decorated the commander of the corvette Soobrazitelny for the incident.
- Confirmed
The Russian vessel involved was the corvette Soobrazitelny.
- Confirmed
The Danish helicopter was a Royal Danish Air Force AS550 Fennec conducting routine photographic identification.
- Confirmed
Russia claims the Danish helicopter did not respond to calls on international channels.
- Confirmed
Denmark has delivered a military aid package to Ukraine worth 1.8 billion kroner in response to the flare incident.
- Confirmed
The aid package was both accelerated in timing and increased in value following the flare incident.
- Confirmed
Danish intelligence expects Russia to escalate hybrid warfare against NATO in the coming months.
- Confirmed
NATO's top commander has described increased intelligence sharing among allies in response to Russian activity.
- Confirmed
Russia could be capable of waging a local war in a neighbouring country within approximately six months.
- Confirmed
Russia could pose a credible threat to one or more NATO countries within approximately two years.
- Confirmed
There is a low but growing risk of a limited Russian military attack against one or more NATO countries bordering Russia.
- Confirmed
Russia's hybrid activity could include destructive cyberattacks affecting critical societal functions.
- Confirmed
Russia's hybrid activity could include sabotage carrying a high risk of casualties.
- Confirmed
Russia could conduct limited strikes or a false-flag operation against a NATO country.
- Confirmed
A full-scale Russian attack on NATO is highly unlikely.
What we still don't know
- What specific military equipment or capabilities the 1.8 billion kroner Ukrainian aid package includes
- Whether the decoration of the Soobrazitelny commander represents a broader policy shift in how Russia rewards confrontational actions against NATO
- Whether Denmark or other NATO members will release radio logs, video, or radar data to support their version of events
- Whether NATO will take any collective action beyond verbal condemnation and increased intelligence sharing
- What Russia's investigation concluded, and whether those findings align with the decision to decorate the commander
- Whether this incident will change Danish or NATO surveillance protocols in the Baltic
- What specific intelligence or indicators led Danish defence intelligence to the six-month and two-year timeline assessments
- Which NATO countries bordering Russia are considered at risk of limited attack
- What distinguishes a limited Russian military attack from a full-scale attack in the Danish assessment
- Whether other NATO intelligence services share Denmark's assessment and timeline
- What specific actions NATO or individual countries are taking in response to the detailed threat assessment
- How Moscow has responded to the Danish intelligence assessment
Russian pressure in the Baltic
- Russian frigate fires flares toward Danish helicopter
- Russia rejects Danish account, accuses helicopter of "dangerous manoeuvres"
- Denmark accelerates Ukraine aid package in response to flare incident; Russia decorates ship commander
- Denmark delivers €240m Ukraine aid package in direct response to Baltic flare incident
- Danish intelligence warns Russia expected to escalate hybrid warfare in coming months
- Denmark says Russian flare passed 10–15 meters from helicopter
- Russia warns NATO of nuclear response over Kaliningrad, dismisses hybrid warfare claims as European intelligence services assess intensifying pressure
- Kallas warns Russian hybrid attacks now putting lives at risk as NATO calls for end to nuclear threats
- Kallas warns Russia putting lives at risk with spike in hybrid attacks across Europe, as Moscow repeats nuclear threats over Kaliningrad
Sources analysed
5 outlets in the analysed roster.
- NBC News — Europe frets as the Kremlin pushes the limits of its hybrid warfare
- The Hill — Russia intensifies hybrid war beyond Ukraine, rattling Europe
- Il Foglio — The timeline of a Russian war against NATO, according to Danish intelligence
- Mint — Russia may intensify hybrid warfare against NATO in coming months, Denmark warns
- London Loves Business — Europe warns Russia's 'hybrid war' is becoming a direct threat