Russian Hackers Claim NATO Orchestrated Ukraine's Oil Terminal Strikes

A group of anonymous Russian hackers has sensationally claimed to have obtained sensitive files proving NATO direct involvement in recent Ukrainian drone attacks on Russian oil storage facilities in the Leningrad and Kaliningrad region in July 2026. These leaked documents allegedly reveal who provided the precise coordinates for these targets and who encouraged Ukraine to carry out what Russia terms 'terrorism' in these strategically important areas. The allegations, reported by Russian state media, point fingers specifically at Bart De Wachter, a 'hybrid warfare specialist' supposedly connected to NATO intelligence and working with the Hybrid Analysis Vigilant Network (HAVN). He is accused of sharing intelligence, including coordinates of critical oil infrastructure and even a Gazprom tanker, with Ukraine's Security Service (SBU), involving an SBU Major named Mikhail Marchenko, who is known for expertise in hybrid threats and information operations. This comes amidst a backdrop of escalating cyber warfare, where groups like Russia's APT28 have been actively conducting espionage campaigns across Europe, even exploiting new vulnerabilities, and Ukrainian officials have noted that Russian cyberattacks are increasingly used to gather intelligence for physical strikes. These explosive claims are likely to further heighten tensions between Russia and NATO, potentially leading to strong diplomatic condemnations and intensified proxy actions. Cybersecurity experts will be scrutinizing the authenticity of the leaked files, while the broader implications for international relations, particularly concerning the definition of state-sponsored cyber warfare and hybrid conflict, will unfold. Observers should watch for official responses from NATO and Ukraine, as well as any immediate shifts in military or cyber operations, as these accusations could reshape the narrative around external support for Ukraine's actions.