Protection
Population warning and preparedness
National public-warning systems, their use during airspace incursions, and published household preparedness guidance.
Coverage · NATO Eastern Flank
Civil Resilience, not a humanitarian emergency. Flank states' civilian systems are functioning; what this measures is how far collective defence depends on them, and how prepared they are.
AssessmentModerate confidence
Broad regional level only. This surface never maps aid routes, facility locations or operational detail. Nothing in this layer is an assessment of whether a state is prepared. The objects record what is publicly established about systems, responsibilities and programmes, with their dates; where a condition is not publicly established, the object says so rather than estimating it.
Current state
Where the civilian systems stand
Moderate confidence · Data as of 2026-09-21
Almost nothing in this module's military layer works without a civilian one. Reinforcement moves on commercial railways and through commercial ports; the electricity and data links between allies are owned by operators; warning reaches populations through national systems no alliance commands; and the sabotage, arson and interference recorded here are handled by police and prosecutors rather than by armed forces. NATO's own founding text makes this explicit — Article 3 commits members to maintain and develop their individual and collective capacity to resist armed attack, and the Alliance treats civil preparedness as a critical enabler of collective defence. This layer records the condition of those civilian systems at system level, and refuses every detail that would describe how to attack them.
- Article 3 basisIn force since 1949As of 2026-09High confidenceThe treaty clause NATO names as the root of resilience and civil preparedness
- Flank states hosting a NATO formation9As of 2026-06High confidenceEach host state provides the civilian support that a foreign formation on its territory needs
- Cross-border links damaged since 202215 assets on 9 daysAs of 2026-09Moderate confidenceConfirmed physical damage to named Baltic cables and pipelines; attribution is a separate question and none has reached a state
- Allies named in the Council's hybrid statement7As of 2024-05High confidenceThe alliance's own count of members affected by Russian hybrid activity when it made the finding
The civilian systems, as analytical objects The 7 systems this module publishes on NATO Eastern Flank, as selectable objects. Each carries its present condition where the module states one, its own figures, the module's analysis of it and — where the corpus establishes one — the mechanism by which security conditions reach it.Interrogate NATO Eastern Flank in Explore
Protection
Civilian exposure to hybrid pressure
Arson, devices in transit networks, railway sabotage and interference with electoral and information systems, and the civil institutions that answer them.
Health & services
Health and emergency continuity
The continuity of essential health and emergency services under collective-defence pressure — a family NATO names and the public evidence does not reach.
Civilian infrastructure
Energy continuity
The electricity and gas links the flank runs on, their exposure to damage, and the residual dependence of two members on Russian supply.
Civilian infrastructure
Communications and undersea connectivity
Submarine telecommunications between the Baltic states, Finland and Sweden, and what repeated damage to them has meant for users.
Supply access
Transport and civilian host-nation support
The civilian transport and regulatory systems that reinforcement depends on, and the arrangements under which a host state receives foreign forces.
Civil resilience
The institutional basis of resilience
Article 3, NATO's civil-preparedness framing, and the division of responsibility between the Alliance and its members.
The systems in full7 blocks of analysis and 4 dated figures, filed under the systems above — the module’s own words, with their own vintages
Everything below is authored on this module’s civil resilience record. Figures carry the vintage of the release that produced them, not the date of this page: the section is graded Moderate confidence and its data is stated as of 2026-09-21.
Population warning and preparednessProtection
Current conditionSystems exist and have been usedAs of 2026-09
Alerts have been issued during drone entries and airspace has been closed. Whether any population is adequately prepared is not assessed here and is not established by any source read.
National public-warning systems, their use during airspace incursions, and published household preparedness guidance.
What would change this
- Activation of national public-warning systemsAlerts issued during airspace incursions are published by the states that issue them. Their use is an observable of both the pressure and the preparedness.
Population warning and preparedness
As of 2026-09
Flank states operate national public-warning systems and have used them during airspace incursions: Romania issued mobile alerts during drone entries, and Finland closed airspace during one case. Several states have published civil-preparedness guidance to households since 2022. This layer records that such systems exist and have been activated. It publishes no shelter location, capacity, stockpile site or evacuation arrangement, and no assessment of whether any population is adequately prepared.
Sources: Official government statements
What this does not establish
- No shelter location, capacity, stockpile site or evacuation arrangement is published here, and none may be added.
- No comparative measure of preparedness between states exists in any source read.
Civilian exposure to hybrid pressureProtection
Current conditionRecurring, prosecuted at court paceAs of 2026-09
The Council stated in May 2024 that Russia is conducting hybrid activities against Allies. Individual cases sit at very different stages of proof, from convictions to charges without verdicts.
Arson, devices in transit networks, railway sabotage and interference with electoral and information systems, and the civil institutions that answer them.
How conditions reach this
Hybrid pressure and civilian exposure
Sabotage, arson and interference directed at allied societies are prosecuted as crimes against civilians, which is where the pressure lands and where its attribution is decided.
- Affected area or system Confirmed
- Access or service disruption Confirmed
- Civilian condition Plausible exposure
- Broader humanitarian significance Plausible exposure
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Allies named in the Council's hybrid statementThe alliance's own count of members affected by Russian hybrid activity when it made the finding Sources: NATO official texts and summit declarations↗ | 7 | 2024-05 | High confidence |
Hybrid pressure on civilian life
As of 2026-09
The North Atlantic Council stated in May 2024 that Russia is conducting hybrid activities against Allies — sabotage, acts of violence, cyber and electronic interference and disinformation — naming seven affected members. What that means in civilian terms is arson at commercial premises, incendiary devices in courier networks, interference with railway signalling and pressure on electoral and information systems. These are handled by police, prosecutors and courts on court timescales, in jurisdictions suspects have often left. The state's answer to an affected civilian is a case file rather than a defence, and that is the structural point this object exists to make.
Sources: Official government statements · NATO official texts and summit declarations↗
What this does not establish
- There is no official deduplicated series of attributed sabotage on flank territory, and this module builds none.
- Casualty, injury and damage figures were not established from primary sources and are not stated.
Recorded events:The North Atlantic Council states that Russia is conducting hybrid activities against Allies2 May 2024An IKEA store in Vilnius is set alight, and a court later convicts the arsonist9 May 2024; conviction 25 November 2025Three buses are burned at a Prague depot, and the arsonist is convicted without an attribution6 June 2024; sentence June 2025Incendiary devices posted from Lithuania ignite in German, Polish and British parcel networks20–22 July 2024; trial opened 17 April 2026An Estonian court finds that an arson was tasked by Russian military intelligence3 July 2025An explosive charge is detonated under the Warsaw–Lublin railway15–16 November 2025
Health and emergency continuityHealth & services
Current conditionNot publicly establishedAs of 2026-09
Nothing read for this module establishes the current condition of any flank state's health continuity arrangements. The object marks the gap rather than filling it.
The continuity of essential health and emergency services under collective-defence pressure — a family NATO names and the public evidence does not reach.
Health and emergency continuity
As of 2026-09
Civil preparedness in NATO's own framing includes the continuity of essential services and the ability of civilian systems to deal with mass casualties. Nothing in the public record read for this module establishes the current condition of any flank state's health continuity arrangements, and this object states none. It exists to mark the gap rather than to fill it, which is the honest treatment of a family the Alliance names and the evidence does not reach.
What this does not establish
- No national health-continuity arrangement was obtained for any flank state.
- Mass-casualty preparedness is named by NATO as part of civil preparedness and is not established in any source read here.
Energy continuityCivilian infrastructure
Current conditionFunctioning, with recorded outagesAs of 2026-09
Every system is operating. Individual links have been lost for periods measured in months and restored; nothing here describes a present shortage.
The electricity and gas links the flank runs on, their exposure to damage, and the residual dependence of two members on Russian supply.
How conditions reach this
Baltic undersea infrastructure damage and its exposure
Repeated damage to cables and pipelines in a shallow, crowded sea turned civilian interconnection into an alliance security problem, without resolving who was responsible for any of it.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Physical systems:The Baltic maritime connection
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Cross-border links damaged since 2022Confirmed physical damage to named Baltic cables and pipelines; attribution is a separate question and none has reached a state Sources: Official government statements | 15 assets on 9 days | 2026-09 | Moderate confidence |
Energy continuity and interconnection
As of 2026-09
The flank's electricity systems are connected across borders by a small number of physical links, several of which have been damaged. An interconnector between Finland and Estonia was severed in December 2024 and returned to commercial use in June 2025 — six months out of service for one cable. Two members remain structurally dependent on Russian pipeline supply. This layer records the dependence and the outages and states no view on how a system would behave under a coordinated constraint, which is not established by any public source.
Sources: Official government statements
What this does not establish
- Operators do not publish redundancy, so nothing here supports a statement about what a further loss would cause.
- The commercial cost of outages is not established and no figure is stated.
Communications and undersea connectivityCivilian infrastructure
Current conditionFunctioning, repeatedly interruptedAs of 2026-09
Fifteen named assets damaged on nine occurrence days since September 2022. In several cases traffic rerouted with no user impact; in others the link was lost until repair.
Submarine telecommunications between the Baltic states, Finland and Sweden, and what repeated damage to them has meant for users.
How conditions reach this
Baltic undersea infrastructure damage and its exposure
Repeated damage to cables and pipelines in a shallow, crowded sea turned civilian interconnection into an alliance security problem, without resolving who was responsible for any of it.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
What would change this
- Repair times and redundancy on damaged cross-border linksOperators publish fault notices and restoration dates. Whether redundancy has improved since 2023 is an operator question, and it is the measurable civilian consequence of the damage series.
Communications and undersea connectivity
As of 2026-09
Telecommunications between the Baltic states, Finland and Sweden run through submarine cables owned by commercial operators. Nine occurrence days since September 2022 have produced confirmed damage to fifteen named assets. Repairs have taken from days to months; in several cases traffic was rerouted with no user impact, and in others the link was lost until repair. The civilian consequence is not the cut itself but the number of alternatives, which operators do not publish.
Sources: Official government statements
What this does not establish
- The number of alternative paths available to any given link is not published by operators.
Transport and civilian host-nation supportSupply access
Current conditionBeing rebuilt, schedule-boundAs of 2026-09
The Baltic rail corridor is under construction to a new gauge and its completion schedule is the constraint. Host-nation support arrangements are bilateral and largely unpublished.
The civilian transport and regulatory systems that reinforcement depends on, and the arrangements under which a host state receives foreign forces.
How conditions reach this
Plan-assigned forces and the movement constraint
Forces pre-assigned to regional defence plans have to reach them, which turns the Alliance's readiness decision into a demand on transport infrastructure it does not own.
- Affected asset, route or region Confirmed
- Operational disruption Confirmed
- Exposed sector or commodity Plausible exposure
- Broader economic significance Plausible exposure
Dependencies
Physical systems:Rail Baltica and the Baltic gauge breakReinforcement enabling and host-nation support
What would change this
- Publication of host-nation support and mobility arrangementsThese are bilateral and largely unpublished. Any publication would be new disclosure and would materially change what this layer can say.
Transport and the civilian side of host-nation support
As of 2026-09
Reinforcement under the regional plans moves over civilian infrastructure and through civilian regulatory systems: rail paths, road weight limits, port slots, customs clearance and the arrangements under which a host state receives and sustains foreign forces. The Baltic states' network is being rebuilt to European standard gauge under a programme whose schedule is the constraint. NATO states that it is developing a policy for improving logistics support; no milestone for it has been published. This layer describes the regulatory and infrastructure side and publishes no route, capacity or transit time.
Sources: NATO official texts and summit declarations↗ · Rail Baltica programme authority (RB Rail AS)↗
What this does not establish
- No route, capacity, transit time or corridor is published by this module, by design.
- Host-nation support agreements are bilateral and were not obtained.
The institutional basis of resilienceCivil resilience
Current conditionEstablished and unchangedAs of 2026-09
Resilience is simultaneously a national responsibility and a collective commitment. NATO sets no standard a member must meet and commands nothing in this layer.
Article 3, NATO's civil-preparedness framing, and the division of responsibility between the Alliance and its members.
| Indicator | Value | As of | Confidence |
|---|---|---|---|
| Article 3 basisThe treaty clause NATO names as the root of resilience and civil preparedness Sources: NATO official texts and summit declarations↗ | In force since 1949 | 2026-09 | High confidence |
| Flank states hosting a NATO formationEach host state provides the civilian support that a foreign formation on its territory needs Sources: NATO official texts and summit declarations↗ | 9 | 2026-06 | High confidence |
The legal and institutional basis
As of 2026-09
NATO roots resilience in Article 3 of the treaty, under which members undertake by continuous and effective self-help and mutual aid to maintain and develop their individual and collective capacity to resist armed attack. The Alliance describes civil preparedness as a central pillar of resilience and a critical enabler of collective defence, and supports Allies in assessing and enhancing it. Resilience is simultaneously a national responsibility and a collective commitment: NATO sets no standard a member must meet and commands nothing here, and every system in this layer belongs to a state or to a company.
What this does not establish
- NATO's resilience baseline requirements were not read this pass, and no member's performance against them is stated.
Evidence and grading
- Figures
- Agency estimates on their own revision cycles. Each figure carries the date it is for; nothing on this surface averages, totals or compares across two vintages.
- Confidence
- How well established Vigil considers this assessment to be. It is not a measure of how severe the situation is.