A Kinetic Cyber Strike in Europe
A dam collapses after a cyber intrusion, killing thousands. Is hacking an act of war if the body count mirrors a bombing?
02:41 AM. The floodgates of a major hydroelectric dam in eastern Poland open completely without authorization after a sophisticated cyber intrusion targets its industrial control systems. The resulting flood wipes out three towns downstream. Thousands are dead within hours.
You are the Secretary General of NATO
The Situation Room
>Polish intelligence attributes the malware to a Russian state-sponsored APT group.
>The Polish Prime Minister is furious, demanding an immediate Article 5 declaration, calling this an unconventional act of war.
>Berlin and Ankara are urging extreme caution, demanding unassailable forensic proof before triggering a potential WWIII.
Internal Briefing Notes
• Article 5 requires unanimous agreement from all 32 NATO member states to declare an armed attack.
• Attribution in cyber warfare is notoriously difficult, though the malware payload exactly matches the signature of Russian GRU unit 74455 (Sandworm).
• Historically, a cyberattack has never successfully been used to trigger a collective kinetic defense clause.
Escalation Window
Reveal each phase to see how the situation deteriorates.
The North Atlantic Council is convened in Brussels. How do you steer the alliance?
Choose your response. There are no good options.
You establish deterrence for cyber warfare, but cross the threshold into a massive conventional showdown with a nuclear state.
You avoid war, but practically signal to adversaries that cyber-kinetic strikes that kill civilians fall below the threshold of NATO retaliation.
Blind the Russian energy grid without a public declaration. It's proportional, but highly likely to spark an uncontrollable escalation spiral.
Related Entities
Explore the institutions, countries, and actors involved in this scenario.
