Lyce · Hybrid Watch

hw_038c7e1a7b05a4f0

Russian commercial vessels spying on Belgium’s North Sea infrastructure.

In June 2024, investigative reporting revealed that at least 167 Russian-linked civilian vessels have been engaged in suspicious activities near strategic underwater infrastructure in the North Sea—including Belgian subsea cables and pipelines. These vessels—ranging from tankers and cargo ships to fishing boats and research-type ships—were logged carrying out low-speed manoeuvres, course deviations and loitering near vital maritime infrastructure off Belgium’s coast and adjacent waters. Belgian maritime authorities alarmed that the behaviour exhibited is consistent with surveillance or preparatory steps for sabotage rather than standard commercial shipping. The dynamics of the incident show a pattern of latent threat: reconnaissance, mapping, presence, and the potential setting of conditions for future sabotage or disruption, rather than a direct destruction event. For Belgium this incident underscores that hybrid warfare operations may bypass land borders entirely, hitting maritime and sub-sea domains, threatening cables, pipelines and infrastructure often under-protected. The fact that some of these vessels continued docking in major Belgian ports (like Antwerp and Zeebrugge) until mid-2023 underlines how hybrid operations may exploit logistic-commercial cover. While no explicit act of sabotage has been publicly confirmed in Belgian waters in this case, the surveillance behaviour itself is part of the hybrid spectrum: collecting intelligence, creating vulnerability, and elevating operational risk without open war.

Occurrence
2024-06-22
Publication
2024-06-21T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
BE
Updated
2026-09-24T06:09:10.079Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2024-06-21T22:00:00Z

    In June 2024, investigative reporting revealed that at least 167 Russian-linked civilian vessels have been engaged in suspicious activities near strategic underwater infrastructure in the North Sea—including Belgian subsea cables and pipelines. These vessels—ranging from tankers and cargo ships to fishing boats and research-type ships—were logged carrying out low-speed manoeuvres, course deviations and loitering near vital maritime infrastructure off Belgium’s coast and adjacent waters. Belgian maritime authorities alarmed that the behaviour exhibited is consistent with surveillance or preparatory steps for sabotage rather than standard commercial shipping. The dynamics of the incident show a pattern of latent threat: reconnaissance, mapping, presence, and the potential setting of conditions for future sabotage or disruption, rather than a direct destruction event. For Belgium this incident underscores that hybrid warfare operations may bypass land borders entirely, hitting maritime and sub-sea domains, threatening cables, pipelines and infrastructure often under-protected. The fact that some of these vessels continued docking in major Belgian ports (like Antwerp and Zeebrugge) until mid-2023 underlines how hybrid operations may exploit logistic-commercial cover. While no explicit act of sabotage has been publicly confirmed in Belgian waters in this case, the surveillance behaviour itself is part of the hybrid spectrum: collecting intelligence, creating vulnerability, and elevating operational risk without open war.