# Hackers Claim NATO Helped Direct Strikes on Russian Oil Terminals — And the Escalation Risk Is Obvious

By The Current Tribune · World · Published Fri, 07 Aug 2026 08:17:33 GMT · Updated Fri, 07 Aug 2026 14:17:33 GMT
Source: The Current Tribune — https://currenttribune.com/article/nato-directly-involved-russian-strikes

NATO’s role in the war in Ukraine has mostly been framed in terms of weapons, training and money. Now a new hacking leak is dragging the alliance into far more dangerous territory: direct involvement in targeting strikes on Russian soil.

Russian-linked hackers say they have obtained files showing that a NATO intelligence-linked hybrid warfare specialist, Bart de Wachter, supplied precise coordinates of oil and gas terminals in Russia’s Leningrad and Kaliningrad regions to Ukraine’s Security Service. If accurate, the claim would mark a sharp escalation in how far NATO-affiliated personnel are willing to go in helping Kyiv hit Russia beyond the battlefield — and in how Moscow may choose to portray that help.

## What the hackers say they found

The core allegation is stark. According to the hackers, de Wachter — described as a hybrid warfare expert with ties to NATO intelligence — provided location data for Russian energy infrastructure that was then used to conduct strikes on Russian territory. The facilities named are oil and gas terminals in the strategically sensitive Leningrad region, which includes the wider area around St. Petersburg, and Russia’s Kaliningrad exclave on the Baltic Sea.

The hackers claim the files they accessed detail:

- Coordinates for specific oil and gas terminals in both regions

- Communication indicating these coordinates were passed to Ukraine’s Security Service (SBU)

- Context suggesting the data was intended to support Ukrainian strike planning

The material has not been independently verified, and none of the governments potentially implicated have publicly commented on the specific allegations. But even as a claim, it lands in the middle of a tense, well-established argument between Russia and NATO over where “support” ends and “co-belligerent” status begins.

## Why this matters for NATO and Russia

The suggestion that a NATO-linked specialist helped select Russian targets touches the reddest of Moscow’s red lines. Russia has repeatedly warned that Western involvement in Ukrainian attacks on Russian territory could be treated as direct participation in the conflict.

In practical terms, the focus on energy infrastructure raises the stakes further. Oil and gas terminals are not just military-adjacent assets; they are central to export revenues, domestic fuel supplies, and in Kaliningrad’s case, the logistics of sustaining a heavily militarized enclave wedged between NATO members Poland and Lithuania.

For NATO, the allegation lands awkwardly against a backdrop of expanding support for Kyiv. Member states have gradually moved from handing over helmets and anti-tank weapons to supplying long-range missiles, advanced air defenses and real-time intelligence. The line NATO officials have insisted on is that alliance structures themselves are not choosing targets or firing weapons — that decisions about where to strike are Ukrainian, even when Western systems and data are involved.

Hackers tying a named hybrid warfare expert with NATO links directly to target coordinates undercuts that narrative, at least in the court of public opinion. Whether or not the documents stand up to forensic scrutiny, the episode hands Moscow another argument for claiming that NATO is now directly orchestrating attacks inside Russia.

## Hybrid warfare, meet hybrid attribution

The figure at the center of the leak, Bart de Wachter, is described as a specialist in hybrid warfare — the blend of cyber operations, psychological tactics, disinformation and conventional military tools that has come to define modern conflict.

If the hackers’ files are genuine, they point to a messy feedback loop:

- Cyber actors breach systems and extract classified or sensitive targeting data.

- Specialists process that data into actionable intelligence, including precise coordinates.

- That intelligence is passed through channels to security services or militaries planning strikes.

The twist here is that the same category of hybrid operations — cyber intrusions, digital forensics, information releases — is now being used to expose, or at least claim to expose, those very processes. Hybrid warfare has always blurred the line between combatants and non-combatants; hybrid attribution blurs the line between inside knowledge and propaganda.

For observers trying to parse the truth, that means treating every leaked file and every name with caution, while also recognizing that covert targeting help from alliance-linked experts would be entirely consistent with how 21st century wars are fought.

## NATO’s support to Ukraine keeps edging outward

This latest allegation doesn’t exist in a vacuum. It comes after months of debate among NATO capitals about how far to go in enabling Ukraine to hit targets deep inside Russia, not just on occupied territory or along the front line.

Across the alliance, support has already evolved in several key ways:

- **Intelligence sharing:** Western services have long been understood to provide Kyiv with satellite imagery, intercepts and tracking data to defend against attacks and, more quietly, to help plan its own operations.

- **Long-range strike capability:** The delivery of systems capable of reaching far into Russian territory has steadily expanded the menu of potential targets.

- **Strategic messaging:** Public statements from some leaders have moved from strict calls for restraint to more flexible language about Ukraine’s right to hit “legitimate military targets” outside its borders.

What’s new in the hackers’ story is the specificity: not just a flow of intelligence, but a named hybrid warfare specialist allegedly providing precise coordinates of oil and gas terminals in two critical Russian regions.

That’s exactly the sort of detail that can sharpen Moscow’s argument that NATO has crossed a line from helping Ukraine defend itself to co-designing its offensive operations on Russian soil.

![Officials review maps as reports claim NATO directly involved in Russian strikes](/media/2026/08/nato-directly-involved-russian-strikes-inline.webp)
*Reports of NATO-linked targeting support have pushed the alliance’s role in the Ukraine war under fresh scrutiny. (Photo: Defence Images / BY-ND via Openverse)*

## Kaliningrad, Leningrad and the geography of escalation

The choice of targets matters almost as much as the alleged method of support. Both Leningrad and Kaliningrad sit at the heart of Europe’s security puzzle.

The Leningrad region encompasses Russia’s second-largest city and major industrial hub. Strikes on energy terminals there carry economic and psychological weight, signaling that the war can reach far beyond the front lines.

Kaliningrad is something else entirely: a heavily fortified Russian exclave ringed by NATO states and bristling with missiles, air defenses and naval assets. Any pattern of coordinated attacks on its critical infrastructure would trigger immediate concern in Brussels and Washington about escalation spirals — and in Moscow about the vulnerability of a key military bastion.

If NATO-linked expertise is genuinely helping Ukraine select high-value targets in either region, it amplifies the risk that a miscalculation could spill over into a direct NATO-Russia confrontation. Even if alliance governments insist that individuals act in national or personal capacities, Moscow is unlikely to split hairs.

## Information war on top of the shooting war

There’s another layer to all this: who benefits from the leak itself. Cyber operations against Ukraine and its supporters have been a constant feature of the conflict, and publicizing sensitive or embarrassing information is part of that toolkit.

By naming a hybrid warfare specialist and highlighting NATO intelligence links, the hackers are doing at least three things at once:

- Putting pressure on Western governments by exposing, or claiming to expose, covert roles in Ukrainian strikes

- Feeding domestic Russian narratives that the country is under direct attack from NATO, not just Ukraine

- Testing how the alliance responds when its behind-the-scenes support appears to surface in the open

Even if the documents are partially true, selectively edited or entirely fabricated, the point is the same: to blur the distinction between NATO and Ukraine in the public mind, and to make any further Western support look like a step toward open confrontation.

## How Kyiv and NATO might respond

Ukraine has consistently argued that attacks on Russian energy and logistics hubs are legitimate responses to missile barrages, drone strikes and ground offensives aimed at its own cities and infrastructure. From Kyiv’s perspective, terminals funneling fuel and resources to the Russian war machine are valid military targets, whether they sit inside occupied territory or across the international border.

NATO governments, for their part, have tried to walk a line between enabling Ukraine to hit back and avoiding the appearance of directing those strikes themselves. That’s why some capitals have placed explicit conditions on how donated weapons can be used, including geographical limits and consultation requirements.

The hackers’ claims, if they gather traction, could force a more explicit conversation inside the alliance about what kind of targeting support is acceptable — especially when it involves critical infrastructure deep inside Russia.

## What This Means

The allegation that a NATO intelligence-linked hybrid warfare specialist helped pick out Russian oil and gas terminals for Ukrainian strikes is still just that: an allegation based on hacker-provided files that have yet to be independently verified. But it lands at a moment when the war in Ukraine is already pushing every boundary of what NATO support looks like.

If the documents are authentic, they point to an alliance that is increasingly entangled in the nuts and bolts of targeting on Russian territory, not just the logistics of arming Ukraine. If they’re not, they still function as a powerful instrument in Russia’s information campaign to paint NATO as a direct adversary, and to justify its own escalation choices.

Either way, the trajectory is clear. As cyber leaks, covert specialists and long-range weapons intersect, the gap between “supporting Ukraine” and “being part of the war” keeps shrinking — and with it, the margin for error in avoiding a direct NATO-Russia clash.

*Photo: NATO / BY-NC-ND via Openverse | Photo: Defence Images / BY-ND via Openverse*