Full Breakdown
EU Ministers Debate Emergency Protocol as Kaja Kallas Warns of New Russian Sabotage Plans
By Drooid · · How we work
Core Event
On September 28 2026, EU High Representative for Foreign Affairs and Security Policy Kaja Kallas told defence ministers in Brussels that intelligence shows Russia is preparing sabotage acts aimed at “dividing” European societies and “intimidating” them to reduce support for Ukraine. Kallas called for a coordinated EU response to hybrid threats below the threshold of armed aggression, urging adoption of an “Emergency Security Protocol” that would let any member state facing a serious sub-threshold incident trigger rapid consultations among all 27 governments.
Background & Context
The proposal follows European Commission President Ursula von der Leyen’s call in her mid-September State of the Union for a new security structure to address hybrid warfare. The EU’s existing “hybrid toolbox” permits diplomatic, sanction and cyber measures, but recent incidents—a suspected drone attack on Leipzig/Halle Airport, cyber intrusions and a Russian aircraft’s breach of Finnish airspace—have heightened concerns that isolated events may be part of a broader campaign. In March 2026 the European Council asked for stronger EU capacity to prevent, deter and respond to hybrid threats, defining sabotage of critical infrastructure, malicious cyber activity, information manipulation, election interference and the instrumentalisation of migration as core elements.
Data & Statistics
- The EU comprises 27 member states that would be consulted under the protocol.
- Member states collectively allocate 2.2 % of GDP to defence, a figure Kallas cited while noting “large capability gaps.”
- The protocol would address sabotage, cyber attacks, arson, drone incursions or other hostile operations that do not meet NATO’s Article 4 or the EU’s Article 42.7 mutual-assistance clause.
Official Statements & Responses
Kallas linked the threat to Russia’s intent to undermine support for Ukraine and urged a mechanism comparable to NATO’s Article 4 but tailored to “gray-zone” operations.
Finnish Defence Minister Antti Häkkänen called for stronger air-defence coordination after the Finnish airspace breach, while Swedish Defence Minister Pål Jonson welcomed additional sanctions against Russia’s “shadow fleet.”
The Danish Defence Intelligence Service warned of a “low but growing” risk of limited Russian actions against NATO members, describing an outright invasion as “highly unlikely” but not impossible.
Criticism & Opposition
The Russian Embassy in Denmark issued a written statement rejecting the EU’s assessment, calling the intelligence “unsupported by credible evidence” and accusing Western governments of “deliberately increasing tensions over Ukraine.”
Verbatim Quotes
- “We see in the intelligence that Russia is planning more sabotage acts and attacks against our democracy,” — Kaja Kallas, foreign policy chief
- “The aim is not to take over the country, but to divide NATO,” — Thomas Ahrenkiel, head of Denmark’s defence intelligence service
What’s Next
The Emergency Security Protocol remains under development as part of the EU’s new security strategy. No formal adoption date has been set; ministers will continue to refine trigger criteria and coordination procedures in upcoming meetings of the Foreign Affairs Council and the European Defence Agency.
