Denmark Warns Russia Could Attack NATO
Danish intelligence says a Russian invasion remains highly unlikely—but can no longer be excluded, while hybrid attacks may intensify within months.
.jpg)
Denmark’s Defence Intelligence Service has issued one of Europe’s starkest official assessments: a Russian invasion of a NATO country remains highly unlikely, but it can no longer be ruled out.
That sentence contains both the warning and the restraint. “Cannot be ruled out” is not the same as “expected.” The agency’s more immediate forecast is that Russia will intensify hybrid warfare in coming months through more frequent attacks with greater consequences.
The report also identifies a low but growing risk of limited military action. Possible scenarios include long-range strikes against infrastructure supporting Ukraine or a small incursion into a neighboring NATO state, potentially using personnel without clear insignia.
The purpose of such an operation might be to test political cohesion rather than seize large territory. Moscow could seek to discover whether allies agree on attribution and whether Article 5 produces a collective response.
Hybrid warfare includes cyberattacks, sabotage, influence operations, GPS interference, covert recruitment and ambiguous drone activity. The term can become so broad that every malfunction is blamed on Russia, which makes evidence and attribution essential.
Denmark has particular reasons for concern. It occupies a strategic position between the Baltic and North Sea, hosts critical maritime and energy infrastructure and supports Ukraine. Danish authorities have warned about Russian-linked sabotage efforts and confrontations involving ships and aircraft.
The assessment urges both public and private actors to prepare. That matters because telecommunications, ports, energy and transport are often operated by companies rather than militaries. A resilient alliance requires backup systems and crisis procedures outside government.
Russia denies offensive plans against NATO and accuses Europe of manufacturing fear to justify rearmament. European governments do benefit politically from public support for defense spending. Those incentives do not invalidate intelligence, but they reinforce the need to publish probability and evidence carefully.
An outright invasion would require visible preparation and substantial forces, and Danish intelligence says such an operation would likely need months. Russia’s military remains committed in Ukraine, creating constraints even as it gains combat experience.
The greater short-term danger is miscalculation. A deniable operation that causes deaths may trigger pressure for retaliation before attribution is complete. Conversely, a weak response can encourage repetition.
Public preparedness should not become panic. Protecting networks, stockpiling critical components, exercising emergency communications and improving drone detection are useful even if no attack occurs.
Hybrid defense begins before attribution
Hospitals, ports and companies cannot wait for a government to identify an attacker before restoring systems. They need offline backups, manual procedures and rehearsed communication that work regardless of who caused the disruption.
Attribution comes later through technical forensics, intelligence and pattern analysis. Governments should share conclusions with enough evidence to persuade allies and publics, especially before imposing costs.
Private companies may resist expensive preparation for low-probability events. Regulation, insurance and public funding can distribute that burden, but poorly designed rules may become security theater.
The Danish assessment should also encourage Nordic and Baltic coordination. Infrastructure crosses borders, so protection in one country can fail if neighboring networks remain vulnerable.
Russia benefits when every incident produces suspicion among allies, even if it was not responsible. Transparent investigation prevents hybrid warfare from achieving effects through rumor alone.
Preparedness is therefore both physical and informational. Societies need systems that keep services running and public communication that does not collapse into panic or denial.
A warning that invasion is “not impossible” should not be read as a prediction with a date attached. Intelligence assessments describe capability, intent and conditions, all of which can change. Russia may prefer hybrid pressure precisely because it produces effects below the threshold of conventional war. Europe can reduce that advantage by repairing vulnerabilities without adopting permanent emergency politics. Parliamentary oversight, judicial review and clear expiration dates should accompany expanded surveillance or security powers. Democratic resilience is weakened if preparation erodes the institutions it is meant to protect. The objective is continuity under pressure, not a society governed indefinitely by fear.
What to watch next
Does Denmark identify sectors or indicators behind the assessment? Do NATO states coordinate thresholds for responding to sabotage and limited incursions? The report does not say invasion is imminent. It says Europe can no longer build policy on the assumption that it is impossible.