EU country blames Russia for new sabotage attack by October 31?

- [2026-08-04/05] A drone carrying explosives struck a parked Ukrainian An-124 at Leipzig/Halle Airport, Germany; a second flying object hit a cargo plane the same night. https://www.cnn.com/2026/09/01/europe/leipzig-drone-germany-russia-intl - [2026-09-01] German Interior Minister Alexander Dobrindt formally attributed the Leipzig drone attack to Russia, the first time Berlin officially blamed Moscow for an attack on a German airport; on 1 September 2026 German Interior Minister Alexander Dobrindt told a press conference that the government had concluded Russia was responsible, saying the assessment fits the known pattern of Russian hybrid operations in Europe, and it was the first time Berlin formally attributed an attempted attack on a German airport to Moscow. This attribution predates market creation (2026-09-19) and would not itself qualify under the "attributions before market creation" exclusion. - [2026-09-02] Polish PM Donald Tusk called an August 31 fire at a WB Electronics drone-components plant in Skarżysko-Kamienna "deliberate arson…an act of sabotage," but did not publicly present evidence linking Moscow to either fire , so Poland has not made a qualifying Russia attribution for this incident. https://www.rte.ie/news/world/2026/0902/1590136-poland-fires-defence/ - [2026-09-09/approx] The Insurance Journal/Bloomberg report (published 2026-09-17) notes Poland, as a key conduit for aid to Ukraine, has suffered a spate of suspicious incidents, with multiple cyberattacks on public utilities like water, energy infrastructure and hospitals, and damage to the rail line between Warsaw and the Ukrainian border attributed to Russian intelligence. This reiterates a pre-existing (November 2025) attribution, not a new qualifying one. https://www.insurancejournal.com/news/international/2026/09/17/885426.htm - [2026-09-14] (week of) A drone assault occurred at a train station near the Ukraine-Poland border, and days later an incident at a Ukraine-Moldova border post killed two civilians; these are described only as "suspected" Russian activity in the same period, not formally attributed. https://www.insurancejournal.com/news/international/2026/09/17/885426.htm - [2026-09-15] (per NPR) The US DOJ announced charges against Russian intelligence-linked individuals for "conspiring to finance terrorism and commit murder for hire" in Europe — a US, not EU-member, attribution, and not a physical attack inside EU territory. https://www.insurancejournal.com/news/international/2026/09/17/885426.htm - [2026-09-17] Bloomberg/Insurance Journal survey of the summer's escalation states officials note "European officials, who asked not to be named discussing sensitive issues, fear that it's only a matter of time until there are civilian casualties," and that the difficulty in responding to hybrid attacks has at times led to a reluctance to blame Russia openly, both to avert escalation and avoid revealing intelligence methods. - [2026-09-18] Newsweek reports French President Macron warning Russia is stepping up hybrid attacks, and ACLED noting a shift to hitting rail infrastructure, including passenger trains, though no new formal EU-state attribution is reported. https://www.newsweek.com/europe-on-high-alert-as-russia-sows-panic-with-hybrid-attacks-12460081 - [2026-09-19] NPR reports leaders of France, Poland and other European nations warning of escalating Russian hybrid attacks, but that Well, they're referring to moves that fall into a kind of gray zone... they're not traditional military attacks but nonetheless undermine Europe's sense of security ; no new named qualifying attack/attribution reported this week. https://www.npr.org/2026/09/19/nx-s1-5974215/france-poland-and-european-allies-warn-of-escalating-russian-hybrid-attacks - [2026-09-19] Market opens on Polymarket; per rules, only NEW attacks (post Aug 1, 2026) with a NEW official Russia attribution made after this date, from an EU member-state government, will qualify — re-attributions of Leipzig or the Polish rail/factory cases will not count. - [2026-09-20/21] No new EU-government official statement formally attributing a fresh sabotage/arson/explosive/physical attack to the Russian state has surfaced in searches covering the days immediately before "today" (2026-09-21); coverage remains focused on warnings, threat assessments and unattributed "suspected"/"likely" Russian incidents (Poland factory fires, border-area drone/train incidents). BOTTOM LINE: The base rate of qualifying attribution events is very high this year (Germany's Leipzig attribution, Poland's 2025 rail sabotage attribution, past Marywilska fire attribution), and the environment is extremely tense with multiple EU governments (Germany, Poland, France) publicly warning of escalating Russian hybrid/sabotage activity as of mid-to-late September 2026; however, as of 2026-09-21 no NEW qualifying attack-plus-official-attribution has occurred since market creation (2026-09-19) — recent Polish fires and border incidents remain only "suspected" or unlinked to Russia, and the Leipzig attribution predates the market window. NOT FOUND: No evidence of any qualifying attribution made strictly after market creation (2026-09-19); no confirmed government statement (Poland, Germany, or other EU state) directly and formally naming Russia (not merely "suspected"/"likely") for an attack occurring on or after August 1, 2026 and announced between 2026-09-19 and today; no scheduled events (trials, prosecutorial announcements) before Oct 31, 2026 were identified in search results.

- [2025-11-17] Poland attributed a railway bombing (explosive device destroying track Warsaw–Lublin line) directly to Russian intelligence, with PM Tusk saying investigators "know it was the Russian Secret Services that commissioned the blast," and prosecutors charging two men on terrorism grounds tied to a foreign power — a clear qualifying-type attribution under this question's rules. https://www.cnn.com/2025/11/17/europe/poland-train-track-ukraine-aid-sabotage-intl - [2025 (prior year)] Last year, the Polish government blamed Russian intelligence for a large fire at a Warsaw shopping centre — showing Poland alone has produced qualifying attributions in successive years (2024, 2025), i.e. roughly annual base-rate hits from one country. - [2026-09-01/02] Germany officially attributed the August 4 Leipzig/Halle Airport drone-and-explosives incident to Russia, with Interior Minister Dobrindt stating it fit a known pattern of "Russian hybrid operations" in Europe and that investigators had proof that agents controlling the drone were working on "behalf of Russian state entities" . Note: under this market's exclusion of "drones... launched by Russian armed forces," this specific case is borderline/likely excluded since it involved a drone device, illustrating how the market's narrow definition filters out many recent real-world attributions. https://www.aljazeera.com/news/2026/9/1/germany-accuses-russia-of-drone-attack-on-leipzig-airport - [2025-11-25] Lithuania secured a criminal conviction in the IKEA arson case, Lithuania convicts teen for IKEA arson attack on behalf of Russia; prosecutors said he acted "in the interests of the military structures and security services of the Russian Federation" — a criminal-charge-based qualifying attribution occurred roughly 10 months before the current market window. - [2025-12-19] Denmark blamed Russia for cyberattacks on water utility and websites — this would NOT qualify (cyber excluded), illustrating that a large share of "attributions" reported in media are cyber/GPS/drone-based and thus excluded by this market's strict criteria. - [Cumulative, as of 2026-09] The Associated Press has logged some 200 incidents of sabotage and malign activity in Europe since the 2022 invasion, including cyberattacks, espionage, disinformation, arson and interference with infrastructure , but only a minority reach the level of formal, named-official, non-hedged state attribution required here. - [2026-08-25] Slovak police foiled an arson plot at a drone plant with suspected Russian links, but this remained only a suspicion ( description as "sabotage" without formal government attribution to Russia), per Wikipedia's hybrid-warfare timeline — showing many incidents stall at "suspected"/"hallmarks of" level, which explicitly does not qualify. - [2026-03] Former Czech intelligence chief Petr Mlejnek said he suspected Russia of being behind an arson at a Pardubice arms factory (paraphrased from Wikipedia's Russian hybrid warfare timeline) — an unofficial, non-government suspicion, again not qualifying. - [Market pricing, live as of 2026-09-21] A same-series Polymarket market, "EU country blames Russia for new sabotage attack by...?" with the December 31 outcome, was trading at 64% (with the "by October 31" variant being the one in question here), per the search snippet index found on Polymarket's NATO topic page. https://polymarket.com/predictions/nato - [2026-09-21] A related Polymarket market, "Russia military action against EU country by...?", prices the December 31 outcome at 19% and notes the Leipzig drone incident as a driver of hybrid-attack pricing, showing traders treat sabotage/hybrid escalation as an ongoing, non-negligible but not near-certain monthly risk. https://polymarket.com/event/russia-military-action-against-eu-country-byptptpt - [Base-rate cadence] Looking across 2024–2026, EU member states (chiefly Poland, and to a lesser extent Lithuania, Germany, Latvia) have produced at least one incident per year that a national government explicitly and non-hedgingly attributed to Russian direction (Warsaw mall fire 2024, IKEA arson conviction late 2025, Poland rail bombing Nov 2025), suggesting a background rate of several qualifying-style events per year, though many recent incidents (cyber, drones, "suspected"/"hallmarks" language) are explicitly excluded by this market's strict definitions, which narrows the effective base rate considerably for any given ~6-week window such as Sept 19–Oct 31, 2026. BOTTOM LINE: The historical pattern shows EU governments make full (non-hedged, named-official) attributions of sabotage/arson/explosive attacks to Russia several times per year (Poland twice in the last two years, Lithuania once), but the market's strict exclusions (cyber, drones/missiles, "suspected/consistent with" language) filter out most recent incidents, and the current sister market (same series, Dec 31 deadline) was priced around 64% "Yes" — suggesting traders see the base rate as fairly high but not near-certain within a ~6-week window. NOT FOUND: No official Polymarket page content for the specific "by October 31" contract's current price could be fetched (site blocked direct fetch); only the "December 31" sister-market price (64%) was found via search snippet. No comprehensive historical count of "qualifying-only" (non-cyber, non-drone) attributions per year was located in a single authoritative dataset.

- [2026-09-01/02] Germany's Interior Minister officially blamed Russia for the Aug. 4 drone-explosive attempt at Leipzig/Halle Airport, stating intelligence proved "people being involved who acted on behalf of Russian state entities," and that "the police investigations, the pattern and intelligence findings prove a Russian responsibility for the attempted attack at Leipzig airport." This attribution predates market creation (Sept 19) so does not itself qualify, but demonstrates Germany's clear willingness and evidentiary threshold to formally attribute attacks to Russia within weeks of an incident. Source: npr.org. - [2026-09-01] Germany's Dobrindt stated Russia said the suggestion it was responsible for the drone attack was absurd while Berlin proceeded anyway, showing attribution occurs even amid firm Russian denials — a precedent likely to repeat for pending cases. Source: cnn.com. - [2026-08-10 to 2026-09-03] A documented cluster of arson/explosive incidents after Aug 1, 2026 across five NATO states (Bulgaria's EMCO facility Aug 10, Estonia's Milrem Robotics building in Tallinn Aug 15, Slovakia's Skyeton drone plant near Prešov Aug 25, Poland's WB Electronics Aug 31, Munich's Rohde & Schwarz Sept 3) remain under active investigation, several with suspects already linked to "foreign state" tasking. Source: discoveryalert.com. - [2026-09-03] Latvia's State Security Service (VDD) detained three Latvian nationals on suspicion of arson and providing assistance to a foreign state over the Tallinn/Milrem fire — a case that, if it advances to formal charges naming Russian intelligence (as in past Polish/Lithuanian precedent), would qualify before Oct 31. Source: discoveryalert.com. - [2026-09-03] German police arrested two Bulgarian nationals over an incendiary attack near defense firm Rohde & Schwarz in Munich; as of the arrest, "No German authority has attributed the incident to Russia... The state-security division is examining a possible political background." This is an open investigation that could mature into a qualifying attribution before the deadline. Source: defencematters.eu. - [2025-10 to 2025-11] Precedent for speed: Polish authorities attributed a Warsaw–Lublin railway explosion to actors tied to Russian intelligence within roughly two weeks of the incident, and "Polish authorities attributed an explosion on the Warsaw–Lublin railway line – a key route for transporting aid to Ukraine – to actors working with Russian intelligence." Source: rusi.org. - [2025-05] Poland has a demonstrated pattern of formally charging suspects for Russia-directed sabotage relatively quickly: "Polish prosecutors have charged two Ukrainian citizens in connection with a suspected Russian operation to orchestrate a series of arson attacks in EU countries... the Ukrainian nationals were involved in a criminal group acting on Russia's behalf." Source: yahoo.com (Kyiv Independent republish). - [2026-09-10] Insurance Journal/Bloomberg reporting notes escalating incident frequency and explicitly states that "In all these cases, the authorities pointed the finger squarely at the Kremlin," referring to a Romania drone incident, the Lithuanian airspace drone downing, and Leipzig — indicating a general readiness among EU/NATO governments to name Russia when evidence permits. Source: insurancejournal.com. - [2026-09-17] The same report highlights a documented Poland railway-sabotage attribution: Poland's Prime Minister "described a fire at a plant for one of Europe's largest drone makers, WB Electronics, in August as an 'act of sabotage,' though no public link was made to Russia" — showing Poland is one step short of full attribution on a live, post-Aug-1 case that could still be completed before Oct 31. Source: insurancejournal.com. - [2026-09-17] Report also notes the rail-line damage between Warsaw and the Ukrainian border was already "damage to the rail line between Warsaw and the Ukrainian border attributed to Russian intelligence," reflecting Poland's readiness to name Russian intelligence for infrastructure sabotage on short notice. Source: insurancejournal.com. - [2026-09] The pace of incidents (Germany, Bulgaria, Estonia, Slovakia, Poland all hit within a six-week window in August-September 2026 alone) combined with multiple open state-security investigations with foreign-national suspects already tied to "acting on behalf of a foreign state" creates several live pathways to a qualifying attribution before Oct 31. BOTTOM LINE: The single most likely path to "Yes" is a formal government attribution completing one of several already-open, post-Aug-1 sabotage/arson investigations (Munich/Rohde & Schwarz, Tallinn/Milrem, or a new Polish rail/drone-plant incident) — a plausible outcome given the demonstrated ~2-6 week attribution cadence Germany and Poland have shown in 2025-2026 for comparable cases. High incident frequency and precedent for rapid, unambiguous state attribution (not merely "suspected") make a Yes resolution well within the realm of the observed base rate before Oct 31. NOT FOUND: No qualifying attribution has yet been confirmed to have been issued after the market's Sept 19, 2026 creation date; could not find any EU government statement dated after Sept 19 that unambiguously names Russia (as opposed to "suspected"/"hallmarks of") for a new post-Aug-1 attack.

- [2026-09-01/02] Germany's Interior Minister Dobrindt formally attributed the Leipzig/Halle airport drone-bomb plot to Russia, and Foreign Minister Wadephul called it deliberate Russian action; Berlin expelled a Russian consulate. Dobrindt told reporters that intelligence points to "people being involved who acted on behalf of Russian state entities," and said "the police investigations, the pattern and intelligence findings prove a Russian responsibility for the attempted attack at Leipzig airport." This is the highest-profile qualifying-style attribution of the year, but it occurred roughly 2.5 weeks **before** market creation (2026-09-19) — the rules explicitly exclude attributions made before market creation and exclude "re-attributions regarding previously attributed attacks," so this precedent cannot itself trigger "Yes" and reduces the pool of fresh attributable incidents. Source: https://www.npr.org/2026/09/02/g-s1-141502/germany-russia-attempted-drone-attack - [2025-11-16] Poland's government attributed the Mika/Puławy rail sabotage to Russian intelligence (FSB) and filed charges against two men. The Polish government said both events were "acts of sabotage," and blamed Russian intelligence for carrying out the attack, and two Ukrainian men working for the FSB were formally accused of the attacks by Polish prosecutors. This is Poland's clearest qualifying-type precedent, but it is over 10 months old and outside this market's window; any further statements on this case would only be a non-qualifying "re-attribution." Source: https://en.wikipedia.org/wiki/2025_Russian_railway_sabotage_in_Poland - [2026-09-17] Bloomberg/Insurance Journal reporting confirms most subsequent incidents (Romania drone strikes, Lithuania drone shoot-down, Estonia arson, Slovakia arson plot, Poland's WB Electronics fire) have been described only as "suspected" Russian, with authorities frequently declining to name a country: Poland, as a key conduit for aid to Ukraine, has suffered a spate of suspicious incidents... Prime Minister Donald Tusk described a fire at a plant for one of Europe's largest drone makers, WB Electronics, in August as an "act of sabotage," though no public link was made to Russia. This illustrates the resolution criteria's key technicality: "hallmarks of" and "suspected" language, which recurs constantly in EU statements, explicitly does not qualify. Source: https://www.insurancejournal.com/news/international/2026/09/17/885426.htm - [2026-09-17] The same reporting notes systemic caution among governments: The difficulty in responding to hybrid attacks has at times led to a reluctance to blame Russia openly, both to avert escalation and avoid revealing intelligence methods, officials say. This structural reluctance — seen repeatedly across 2023-2026 — is a strong status-quo argument for continued non-attribution or soft "hallmarks" language rather than formal blame. - [2026-09-18] Polish PM Tusk warned of Russian "accidental" attacks and a coordinated campaign, but this was rhetoric about future risk, not a qualifying attribution of a specific post-market incident: Polish Prime Minister Donald Tusk said that these potential strikes "intend to paralyze NATO" in an attempt to demonstrate that Article 5 "exists only in theory." Source: https://www.npr.org/2026/09/18/nx-s1-5973265/poland-nato-russia - [2026-09-03] Kaja Kallas (EU foreign policy chief) called the Leipzig incident "state-sponsored terrorism," but per the resolution criteria, statements by EU/NATO institutions "will not qualify on their own" — only a national government's own attribution counts. "It is clear that it has all the hallmarks of state-sponsored terrorism. The question is: what do we do about this," EU foreign policy chief Kaja Kallas told reporters. This is a recurring pattern: EU-level condemnation substitutes for, rather than supplements, national-level formal attribution. Source: https://www.euronews.com/my-europe/2026/09/03/denmarks-intelligence-agency-warns-russia-actively-preparing-acts-of-sabotage - [2026-09] Multiple recent incidents (Romania drone destruction, Lithuania drone shoot-down, arson plots in Slovakia, Munich incendiary-device arrests) were reported only as Russia-linked "suspected" or investigated cases without a formal top-level government attribution statement naming Russia as state actor, per the Maryland MCAC roundup. Source: https://mcac.maryland.gov/2026/09/europe-targeted-by-spiraling-campaign-of-sabotage-and-russia-is-the-chief-suspect/ - [2026-09-17] Bloomberg notes Kremlin denials remain vigorous and often escalate tensions rather than settle attribution, which historically has not stopped attributions but shows contestation continues: Interior Minister Alexander Dobrindt said... Kremlin spokesman Dmitry Peskov said those accusations were "completely unfounded." - [Historical pattern] Even when Western intelligence consensus is strong (Nord Stream 2022, Skripal 2018), individual EU governments often avoid explicit "Russian state" attribution language, deferring to EU/NATO joint statements or "highly likely" phrasing that would fail this market's strict qualifying-attribution bar. The Skripal case shows the EU-wide language was "highly likely Russia is responsible" — precisely the hedge word ("likely") the current rules exclude. Source: https://www.pressreader.com/malaysia/the-borneo-post/20180324/282505774140302 - [Deadline arithmetic] The window is exceptionally narrow: 2026-09-19 to 2026-10-31, just six weeks, immediately following the single biggest attribution event (Leipzig, Sept 1-2) which is now ineligible. For "Yes" to trigger, a wholly new qualifying attack must occur on/after Aug 1, 2026 (already satisfied for future incidents) AND a national government must issue an unhedged, on-the-record statement naming Russia as attacker within this specific 6-week window — a higher bar than the "hallmarks/suspected" language governments have defaulted to for most 2026 incidents. BOTTOM LINE: The clearest and most authoritative 2026 Russia attribution (Germany/Leipzig) falls before market creation and is explicitly disqualified by the rules, while most subsequent incidents (Romania, Lithuania, Slovakia, Poland's WB Electronics fire) have been met with hedged "suspected"/"hallmarks" language that also fails to qualify; absent a new, unambiguous national-government statement in the narrow Sept 19–Oct 31 window, the pattern of official caution and reliance on EU/NATO-level condemnation (which doesn't count) supports a NO resolution. NOT FOUND: No evidence located of any EU national government issuing an unhedged, qualifying attribution of a new (post-Aug 1, on-or-after Sept 19) sabotage/arson/explosive/physical attack to the Russian state between Sept 19 and Sept 21, 2026 (the search cutoff); could not confirm whether any statement from Denmark, Lithuania, Estonia, or Romania regarding recent drone/arson incidents has since escalated beyond "suspected" language.