
The EBU map's deliberate conservatism — excluding cyber, influence operations, and trained-officer espionage — means the visible incidents represent perhaps 15-20% of actual Russian activity. A German defense planner reading that 163 sabotage cases occurred in eight months knows the pace is accelerating (28 cases per month) and that Bundeswehr air bases, weapons plants, and power infrastructure are the target set.
The political problem is acute: if Germany cannot declassify enough evidence to show voters why €100M in civil resilience spending is necessary, budget pressure will defer hardening until after an actual successful attack. Sweden's 2025 power-plant cyberattack (mentioned in the article) is the precedent — and it did not trigger emergency appropriations until months later.
German defense infrastructure is absorbing the densest concentration of documented Russian hybrid probing on the continent, yet the official tally remains fragmented across military, civil, and intelligence silos — no consolidated reporting exists for the public or Parliament.
The Bundeswehr's internal count (163 sabotage cases, 1,034 drone overflights) vastly exceeds the four incidents visible on the EBU map, meaning Germany's actual exposure is at least 40 times higher than the public record suggests. This gap between classified and disclosed incident rates forces Berlin's defense planners to harden critical infrastructure (rail, power, military sites) without being able to justify the cost to taxpayers or the Bundestag using unclassified evidence.
Does the 163 sabotage count include only Russia-attributed cases, or does it bundle Russian, Chinese, and Iranian activity?
Strategic intelligence, synthesized daily — with a public track record. Every call graded against what actually happened.