Poland and France Warn of 'Accidental' Russian Strikes on NATO

What happens when a missile lands on NATO soil and Moscow simply calls it a mistake? That is the question Poland and France forced into the open in four days in mid-September, and everything since has been an attempt to answer it before a burning warehouse or a darkened rail line forces the answer under pressure. ^{4 12}

On September 17 in Warsaw, Polish Prime Minister Donald Tusk — mislabeled as president in one programme transcript — took the Sejm rostrum to lay out what he called the most likely security scenario for the coming fall and winter. Citing intelligence assessments he described as very consistent and convincing from Polish services, NATO, Ukraine and the United States, he said Russia would intensify strikes on Ukrainian cities, warehouses, rail and logistics and energy while adding hybrid drone and missile strikes against countries supporting Ukraine, including Poland. ^{4 5 8}

The core of the Warsaw warning was not the weapon but the alibi. There is a real risk, Tusk argued, that drones or other missiles enter the territory of one or several NATO countries on the eastern flank and cause damage and destruction, which Moscow would then dismiss as accidents with no reason for any NATO response. The purpose, in his formulation, is to paralyse or weaken motivation to defend a member under attack, to weaken NATO integrity, and to demonstrate that Article 5 collective defence exists only in theory. ^{4 7 36}

He stressed that nothing suggested a full invasion, but that Poland and the eastern flank faced a serious test, with late autumn and winter tragically critical for Ukraine. Moscow, he said, is not ready for serious discussion of a truce or ceasefire at least until the end of winter, and Russia does not even need to cross the border because it is already waging hybrid war with drones, sabotage and online disinformation. ^{9 8}

A day later in Paris, President Emmanuel Macron said the Russian hybrid threat facing Europeans and France had intensified in recent weeks through drones, cyberattacks, airspace incursions and sabotage, that France itself had been targeted, and that the nature of Russian aggression in Europe is changing. Speaking at the Elysee Palace after meeting party leaders and 2027 presidential hopefuls, he ordered government to prepare a protection plan for critical infrastructure and the most sensitive sites of the defence industrial and technological base against drones and cyberattacks. ^{12 13 16}

Prefects had already been told to raise vigilance, Macron said, and attacks on French soil would not go unanswered. The intent, he said, is to intimidate Europeans and break the effort to support Ukraine. The result will be the exact opposite, because security today and tomorrow is at stake in Ukraine. Potential French targets discussed in follow-on detail include energy, rail, telecoms, water and defence-industry sites, and on September 21 Interior Minister Laurent Nunez called the hybrid threat real and documented. ^{16 21 44}

Cohesion is the explicit battlefield. Tusk warned of splitting NATO and the European Union, of political change in some European countries toward peace and pacifism language that in practice means total capitulation for Ukraine, and of anti-EU, anti-ally and anti-Ukrainian messaging that serves Russian strategy. Macron warned that no one is safe from shadow operations designed to frighten Europeans into easing support for Kyiv. The September 21 BBC Newscast discussion with Europe editor Katya Adler that pulled the two warnings together framed that fracture as the central risk. ^{4 12 1}

The warnings sit on concrete recent damage. On August 5 an explosive-laden drone attempted an attack at Leipzig/Halle airport while a Ukrainian Antonov cargo plane was present. In early September Germany blamed Russia, the European Union and NATO called it a new escalation on EU soil directly attributed to Russia, Germany moved to shut a Russian consulate among other measures, and European Commission President Ursula von der Leyen pledged more pressure with calls for new sanctions. On September 13 suspects were identified as a Belarusian citizen and a Russian national linked to military intelligence services. Russia denied involvement. ^{73 74 78}

Around the same period a wave of sabotage exposed counter-intelligence gaps on the eastern flank, Estonia moved to deploy drone surveillance, and counts compiled September 22 show Romania logged 27 airspace incursions in 2026, Moldova nearly 60 since 2022, and sixteen NATO members reported drone violations or recovered debris in two years, with a NATO jet shooting down a drone over Lithuania for the first time in September. NATO is shifting from traditional air policing toward 360-degree defence. ^{79 82 80}

Between September 20 and 22 European intelligence chiefs echoed Warsaw with a months, not years timeline for more decisive Russian action against the alliance, ranging from missile and drone attacks to limited ground incursion. Czech BIS director Michal Koudelka named possible forms as limited border incursions, false-flag provocations, increased drone activity and large-scale influence campaigns, with focus discussed around the Suwalki Gap, the 80-kilometre Polish-Lithuanian border between Kaliningrad and Belarus. One chief warned a panicked reaction risked helping the Kremlin. The available material gives categories and timeframe but no specific date, target or single sourcing document. ^{93 94 96}

That fracture carries material stakes for ordinary life: Ukrainian warehouses, rail and power under intensified bombardment heading into winter heating season, French power, water, trains, phones and defence jobs under drone and cyber threat, crowded airports and rail hubs facing closures and delays. Taxpayers were exposed after the June-July breach of the Directorate General of Public Finances in which compromised staff and third-party logins allowed exfiltration of names, addresses, tax numbers and income and property data for 678,000 individuals and businesses, disclosed after a hacker advertised the database. ^{86 87 85}

That breach is not attributed in the available evidence to Russia or any named group and cannot be presented as a proven Russian operation. The compromise came through credentials belonging to a DGFiP employee and an authorised third party, not a software flaw, and drew a prosecutor cybercrime investigation and an interministerial crisis cell on August 17. Poland's invocation of NATO Article 4 for consultations after a drone incursion dates to September 2025, not September 2026, and must not be confused with the current warnings. ^{87 85 81}

Macron's infrastructure plan is ordered but not published, Tusk heads to Kyiv amid talks over sanctions and support, intelligence services warn without naming the first target, Article 5 remains untested against an accident narrative, and saturated political systems face a winter where a single drone that damages a warehouse, a rail line or a power plant could force the decision Tusk described: treat it as accident and absorb it, or treat it as attack and answer it together. ^{16 58 94}