What the Theory Claims
On September 26, 2022, explosions damaged three of the four strings of the Nord Stream 1 and Nord Stream 2 natural gas pipelines running beneath the Baltic Sea between Russia and Germany. The pipelines carried Russian gas to Europe. The identity of the perpetrator has been the subject of intense dispute. Early attributions pointed variously to Russia (as a pressure tactic), to the United States and/or United Kingdom (acting to permanently sever Europe's energy dependency on Russia), and to Ukraine or pro-Ukrainian actors. Investigative journalist Seymour Hersh published a detailed claim in February 2023 alleging U.S. Navy divers, working with Norwegian assistance, planted the explosives during NATO exercises.
What Is Established
Swedish, Danish, and German authorities all opened investigations. Swedish authorities closed their investigation in February 2024, citing jurisdictional limitations, without publicly naming a perpetrator. Danish authorities closed their investigation in February 2024 as well. German prosecutors continued their investigation; in June 2026 the Federal Prosecutor indicted one Ukrainian suspect (see Current Status). Multiple European media outlets — including Der Spiegel, Zeit Online, ARD, and the New York Times — reported separately that investigators were examining a Ukrainian-linked operation, possibly involving a privately-owned yacht called Andromeda and a small team with access to diving equipment.
The Hersh Claim
Hersh's February 2023 Substack article, citing a single anonymous source, described a covert U.S. operation in which Navy divers planted C4 explosives on the pipelines during the BALTOPS 22 NATO exercises in June 2022, with a Norwegian maritime patrol aircraft dropping a sonar buoy to detonate them months later. The White House and Norwegian government denied the claim. No corroborating sources or documentary evidence have been made public. Investigative journalists working the story independently have not confirmed Hersh's account, and subsequent reporting has pointed toward non-U.S. actors.
Alternative Attributions
The Andromeda yacht theory, reported by multiple European outlets, involves a vessel with documented ties to Ukrainian-connected individuals. A German European arrest warrant dated 3 June 2024 names a Ukrainian man whom prosecutors describe as a trained diver in the group suspected of placing the explosives, and the Federal Prosecutor's 2026 indictment of another Ukrainian man alleges the plan was developed on behalf of Ukrainian state authorities (see Current Status). Ukrainian officials have denied involvement. Russia has called for UN-level international investigation and attributed the attack to the United States and United Kingdom, a claim both governments have denied.
Why It Persists
The Nord Stream sabotage involves critical infrastructure, occurred during an active war, and intersects with the strategic interests of multiple major powers. The formal closure of Swedish and Danish investigations without public attribution has fueled the perception of a cover-up. The competing attributions — each implicating actors with motive and capability — reflect the genuine difficulty of establishing responsibility for covert maritime operations.
Current Status
As of early November 2026, no court has ruled on who carried out or ordered the sabotage, and no government has formally attributed responsibility. The Swedish and Danish inquiries were closed in February 2024, so the German criminal case is the only formal proceeding still active.
On 30 June 2026 the German Federal Prosecutor filed an indictment against a Ukrainian man before the State Security Senate of the Hanseatic Higher Regional Court in Hamburg. He was arrested in Italy on 21 August 2025 on a European arrest warrant; Italian courts first blocked his extradition in October 2025 over an issue with the German warrant and then approved it, and he was transferred to Germany in November 2025. He is charged with a war crime (an attack on civilian objects), causing an explosion, destroying structures and disrupting public utilities. Prosecutors allege that, after the start of Russia's full-scale invasion at the end of February 2022, he and other military personnel developed a plan, on behalf of Ukrainian state authorities, to destroy the pipelines; that a sailing yacht was rented through intermediaries from a company in Rostock using forged identity papers; and that the group carried large quantities of high-performance explosives of military use to the vicinity of the Danish island of Bornholm. His trial opened in Hamburg on 14 October 2026, with hearing dates set through at least 17 December 2026. His defence says prosecutors have not provided direct, conclusive evidence of his involvement, and Bloomberg reported on 18 October 2026 that a defence lawyer argues the war-crime charge was not covered by the Italian extradition ruling. On 27 October 2026 the court rejected a separate defence motion to end the trial, which argued that he was still an active-duty soldier, obliged by Ukrainian law not to speak for reasons of national-security secrecy, and that under German law a person who cannot speak out cannot be convicted; the court held that his freedom to testify in Germany is not limited by a foreign country's conditions of service. Kyiv has denied any involvement. He is presumed innocent, and these are prosecution allegations that have not been tested to a verdict.
A second suspect, Volodymyr Z., whom German prosecutors describe as a trained diver, has not been indicted. He was arrested near Warsaw on 30 September 2025 on a German European arrest warrant dated 3 June 2024, but a Warsaw court refused to surrender him on 17 October 2025 and ordered his release; the Associated Press reported that the judge questioned German jurisdiction, noting the explosions occurred in international waters. He was arrested again in Pula, Croatia, on 19 August 2026. A Croatian court in Pula reportedly authorised his extradition on 18 September 2026, according to Ukrainian media; his lawyer said the decision would be appealed, and he has applied for asylum in Croatia. At the opening of the Hamburg trial he was reported to be in custody in Croatia, contesting extradition.
The case is classified as an ongoing investigation: the physical facts of the sabotage are not in dispute, but perpetrator attribution remains unresolved in the public record until a court rules.
What is documented, and where the claim outruns it
The explosions, national investigations, closures of some inquiries, media reporting, and official denials are documented.
The unsupported leap is treating any one anonymous report or geopolitical motive as final proof of command responsibility.
Evidence Filters19
September 2022 explosions confirmed as sabotage
SupportingStrongSwedish, Danish, and German investigations all concluded the explosions were deliberate — not natural or accidental.
Hersh 2023 article alleging US authorship
SupportingSeymour Hersh published a detailed account in February 2023 attributing the operation to US Navy divers with Norwegian support.
Ukrainian attribution via German warrant and 2026 indictment
SupportingStrongA German European arrest warrant dated 3 June 2024 names Volodymyr Z., whom prosecutors describe as a trained diver. In June 2026 German federal prosecutors indicted another Ukrainian man, alleging the group acted on behalf of Ukrainian state authorities; his trial opened in Hamburg on 14 October 2026. These are prosecution allegations, not findings: no court has ruled and both men are presumed innocent. WSJ reporting in 2024 also identified a Ukrainian operation.
Physical evidence on Baltic seabed
SupportingStrongGerman Navy divers recovered explosive residue consistent with military-grade explosives (HMX/RDX family), requiring specialist operational capability.
Strategic-context analysis
SupportingWeakMultiple analyses have identified potential motives for US, Ukraine, UK, Russia, and Poland. Motive alone does not identify perpetrator.
Russia initial accusations of US/UK
SupportingWeakRussia's initial accusation of US and UK authorship has not been substantiated by any subsequent evidence.
Hersh article relies on single anonymous source
DebunkingHersh's February 2023 piece cites only one unnamed source. This falls below most journalistic attribution standards and has been denied by the White House and the Norwegian foreign ministry.
German prosecution case points to a Ukrainian-led group
DebunkingGerman federal prosecutors allege in their 2026 indictment that a group led by a Ukrainian officer rented a sailing yacht in Rostock with forged identity papers and carried military-grade explosives to the Bornholm area. Sweden handed material to the German investigation when it closed its own inquiry. If proven at trial, this would support the Ukrainian-operation hypothesis over the US one; for now it is an allegation.
Ukrainian government denies authorship
DebunkingKyiv has strictly denied any involvement in the attack. German federal prosecutors allege in their 2026 indictment that the plan was developed on behalf of Ukrainian state authorities; that allegation is untested in court and the chain of command up to senior government remains contested.
German trial under way; Swedish and Danish inquiries closed
DebunkingA German criminal trial of one suspect opened in Hamburg on 14 October 2026, and Germany is seeking the extradition of a second suspect from Croatia. Sweden and Denmark closed their inquiries in February 2024 without naming perpetrators. No court has yet ruled on who planned the attack.
Show 9 more evidence points
The adjacent fact is real but narrower than the viral claim
SupportingThe explosions, national investigations, closures of some inquiries, media reporting, and official denials are documented. The page treats this as the starting point rather than the final conclusion.
The unsupported leap requires its own evidence
DebunkingStrongThe unsupported leap is treating any one anonymous report or geopolitical motive as final proof of command responsibility. This is the part that must be tested directly instead of inferred from suspicion.
The verdict-change standard is explicit
NeutralA verdict change would require official prosecutorial findings, authenticated operational records, or court-tested evidence identifying the planners and chain of command.
Primary records establish the narrow baseline
SupportingStrongThe strongest version of this page starts with the verifiable baseline: The explosions, national investigations, closures of some inquiries, media reporting, and official denials are documented. That baseline should be treated as real where the records support it, even when the broader claim fails.
Independent corroboration matters more than pattern-matching
SupportingThe page gives more weight to court records, technical reports, official archives, peer-reviewed research, and named-accountability reporting than to visual coincidences, anonymous claims, or recycled screenshots.
The public-interest question remains legitimate
SupportingA debunked or partially true verdict does not erase the public-interest question. It narrows the question to what the evidence can actually show, then marks the remaining allegation as unproved until better records appear.
Motive is not the same as mechanism
DebunkingStrongThe existence of a possible motive, institutional incentive, geopolitical benefit, or prior misconduct does not by itself prove the specific mechanism alleged here.
Missing information is not positive proof
DebunkingStrongGaps, redactions, delays, poor communication, or unresolved questions can justify scrutiny, but they do not automatically identify a perpetrator or validate the strongest version of the claim.
Claim provenance remains a separate burden
DebunkingThe unsupported leap is treating any one anonymous report or geopolitical motive as final proof of command responsibility. The page therefore asks where the allegation entered the record, who can authenticate it, and whether independent sources converge on the same conclusion.
Evidence Cited by Believers10
September 2022 explosions confirmed as sabotage
SupportingStrongSwedish, Danish, and German investigations all concluded the explosions were deliberate — not natural or accidental.
Hersh 2023 article alleging US authorship
SupportingSeymour Hersh published a detailed account in February 2023 attributing the operation to US Navy divers with Norwegian support.
Ukrainian attribution via German warrant and 2026 indictment
SupportingStrongA German European arrest warrant dated 3 June 2024 names Volodymyr Z., whom prosecutors describe as a trained diver. In June 2026 German federal prosecutors indicted another Ukrainian man, alleging the group acted on behalf of Ukrainian state authorities; his trial opened in Hamburg on 14 October 2026. These are prosecution allegations, not findings: no court has ruled and both men are presumed innocent. WSJ reporting in 2024 also identified a Ukrainian operation.
Physical evidence on Baltic seabed
SupportingStrongGerman Navy divers recovered explosive residue consistent with military-grade explosives (HMX/RDX family), requiring specialist operational capability.
Strategic-context analysis
SupportingWeakMultiple analyses have identified potential motives for US, Ukraine, UK, Russia, and Poland. Motive alone does not identify perpetrator.
Russia initial accusations of US/UK
SupportingWeakRussia's initial accusation of US and UK authorship has not been substantiated by any subsequent evidence.
The adjacent fact is real but narrower than the viral claim
SupportingThe explosions, national investigations, closures of some inquiries, media reporting, and official denials are documented. The page treats this as the starting point rather than the final conclusion.
Primary records establish the narrow baseline
SupportingStrongThe strongest version of this page starts with the verifiable baseline: The explosions, national investigations, closures of some inquiries, media reporting, and official denials are documented. That baseline should be treated as real where the records support it, even when the broader claim fails.
Independent corroboration matters more than pattern-matching
SupportingThe page gives more weight to court records, technical reports, official archives, peer-reviewed research, and named-accountability reporting than to visual coincidences, anonymous claims, or recycled screenshots.
The public-interest question remains legitimate
SupportingA debunked or partially true verdict does not erase the public-interest question. It narrows the question to what the evidence can actually show, then marks the remaining allegation as unproved until better records appear.
Counter-Evidence8
Hersh article relies on single anonymous source
DebunkingHersh's February 2023 piece cites only one unnamed source. This falls below most journalistic attribution standards and has been denied by the White House and the Norwegian foreign ministry.
German prosecution case points to a Ukrainian-led group
DebunkingGerman federal prosecutors allege in their 2026 indictment that a group led by a Ukrainian officer rented a sailing yacht in Rostock with forged identity papers and carried military-grade explosives to the Bornholm area. Sweden handed material to the German investigation when it closed its own inquiry. If proven at trial, this would support the Ukrainian-operation hypothesis over the US one; for now it is an allegation.
Ukrainian government denies authorship
DebunkingKyiv has strictly denied any involvement in the attack. German federal prosecutors allege in their 2026 indictment that the plan was developed on behalf of Ukrainian state authorities; that allegation is untested in court and the chain of command up to senior government remains contested.
German trial under way; Swedish and Danish inquiries closed
DebunkingA German criminal trial of one suspect opened in Hamburg on 14 October 2026, and Germany is seeking the extradition of a second suspect from Croatia. Sweden and Denmark closed their inquiries in February 2024 without naming perpetrators. No court has yet ruled on who planned the attack.
The unsupported leap requires its own evidence
DebunkingStrongThe unsupported leap is treating any one anonymous report or geopolitical motive as final proof of command responsibility. This is the part that must be tested directly instead of inferred from suspicion.
Motive is not the same as mechanism
DebunkingStrongThe existence of a possible motive, institutional incentive, geopolitical benefit, or prior misconduct does not by itself prove the specific mechanism alleged here.
Missing information is not positive proof
DebunkingStrongGaps, redactions, delays, poor communication, or unresolved questions can justify scrutiny, but they do not automatically identify a perpetrator or validate the strongest version of the claim.
Claim provenance remains a separate burden
DebunkingThe unsupported leap is treating any one anonymous report or geopolitical motive as final proof of command responsibility. The page therefore asks where the allegation entered the record, who can authenticate it, and whether independent sources converge on the same conclusion.
Neutral / Ambiguous1
The verdict-change standard is explicit
NeutralA verdict change would require official prosecutorial findings, authenticated operational records, or court-tested evidence identifying the planners and chain of command.
Quick Talking Points
- Current primary evidence points to Ukrainian operation; Hersh's US-authorship claim is unsupported.
- Chain of command up to senior Ukrainian government is contested.
- Definitive attribution may require declassification that could take years.
- The Nord Stream sabotage is attribution-contested but confirmed as deliberate.
Timeline
Nord Stream explosions
Four ruptures on NS1 and NS2 pipelines.
Investigations launched
Sweden, Denmark, Germany open investigations.
Hersh article
Alleges US-Norwegian authorship.
NYT: Ukrainian intelligence cell
US intelligence points to Ukrainian operation.
Der Spiegel: Andromeda yacht
Der Spiegel reports that the yacht Andromeda was allegedly used in the attack.
Swedish investigation closed
Sweden closes inquiry without public attribution.
Danish investigation closed
Copenhagen Police and PET discontinue their criminal investigation, concluding the explosions were deliberate sabotage but that there is no sufficient basis for a criminal case in Denmark.
Source →German arrest warrant
Investigating judge of the Federal Court of Justice issues a European arrest warrant for Volodymyr Z., a Ukrainian man whom prosecutors describe as a trained diver.
Source →Suspect arrested in Italy
A Ukrainian man later indicted in Germany is arrested in the province of Rimini on a European arrest warrant. Italian courts first block his extradition in October 2025 over an issue with the German warrant, then approve it; he is transferred to Germany in November 2025.
Source →Polish court refuses extradition
A Warsaw court refuses to surrender Volodymyr Z., arrested near Warsaw on 30 September 2025 on the German warrant, and orders his release.
Source →German indictment filed
The Federal Prosecutor indicts the Ukrainian man arrested in Italy before the State Security Senate of the Hanseatic Higher Regional Court in Hamburg: war crime (attack on civilian objects), causing an explosion, destruction of structures and disruption of public utilities. Prosecutors allege he and others acted on behalf of Ukrainian state authorities. He is presumed innocent.
Source →Second suspect arrested in Croatia
Croatian police arrest Volodymyr Z. in Pula on the German European arrest warrant of 3 June 2024. Germany seeks his extradition.
Source →Croatian court reportedly authorises extradition
According to Ukrainian media reports, a court in Pula authorises the extradition of Volodymyr Z. to Germany. His lawyer says the decision will be appealed, and he later applies for asylum in Croatia.
Source →Hamburg trial opens
The trial of the Ukrainian man indicted in June opens at the Hanseatic Higher Regional Court in Hamburg. No verdict has been reached.
Source →Court rejects defence motion to end trial
The Hamburg court rejects a defence motion to end the trial, which argued that the defendant was bound by Ukrainian law not to speak for national-security reasons. The court holds that his freedom to testify in Germany is not limited by a foreign country's conditions of service. The trial continues.
Source →
Notable Quotes
“We are treating this as a deliberate act of sabotage. The damage was not caused by a technical failure. Someone blew up those pipelines.”
Verdict
The 2022 blast (September 26) was confirmed as deliberate sabotage by Swedish, Danish, and German investigations. Attribution has been contested. Seymour Hersh (February 2023) alleged US CIA authorship based on a single anonymous source — widely dismissed by US officials but not definitively refuted. Wall Street Journal reporting in 2024 attributed the operation to a Ukrainian team with senior Ukrainian government knowledge. In June 2026 the German Federal Prosecutor indicted a Ukrainian former military officer, alleging that he and others acted on behalf of Ukrainian state authorities; his trial opened in Hamburg on 14 October 2026. These are prosecution allegations: he is presumed innocent, his defence says prosecutors have not provided direct, conclusive evidence of his involvement, and no court has ruled. A second suspect, wanted on a German arrest warrant dated 3 June 2024, was arrested in Poland in September 2025 (a Polish court refused to surrender him) and again in Croatia in August 2026, where he is contesting extradition. Kyiv denies involvement. Russia has claimed multiple conflicting attributions. Sweden and Denmark closed their inquiries in February 2024. The case is genuinely open.
What would change our verdicti
Formal declassification by any of Germany, Sweden, Denmark, US, or Ukraine of primary-source operational records, with verified chain of custody.
Frequently Asked Questions
Who blew up Nord Stream?
Unsettled in court. German federal prosecutors have indicted a Ukrainian former military officer, alleging that he and others acted on behalf of Ukrainian state authorities, and his trial opened in Hamburg on 14 October 2026; he is presumed innocent and no verdict has been reached. A second suspect is contesting extradition from Croatia. Seymour Hersh's 2023 article alleged US authorship; this has been denied by US officials and is not supported by subsequent primary evidence. Kyiv denies involvement, and Russia's accusations have not been substantiated.
Did the US do it?
US officials have denied it. The Hersh account relies on a single anonymous source and has not been corroborated. Subsequent investigations (the German federal prosecutor's 2026 indictment, and NYT reporting) have pointed toward a Ukrainian operation rather than a US one.
Did Ukraine do it?
German federal prosecutors allege that the operation was planned by Ukrainian military personnel on behalf of Ukrainian state authorities. That is an allegation in an indictment now being tried in Hamburg, not a finding. Kyiv denies any involvement, and the chain of command remains contested.
What does the physical evidence show?
Explosive residue on the pipeline indicates military-grade explosives. Der Spiegel reported in 2023 that the yacht Andromeda was allegedly used in the attack, and German prosecutors' 2026 indictment alleges that the explosives were carried on a sailing yacht rented in Rostock with forged identity papers. Specialized diving operations would be required for the depths involved.
Will we ever know?
Possibly. A criminal trial of one suspect is under way in Hamburg (it opened on 14 October 2026), and Germany is seeking the extradition of a second suspect from Croatia. A trial can put evidence on the public record, but Sweden and Denmark closed their inquiries in 2024 without naming perpetrators. Attribution in intelligence operations can also take decades to become definitively established through declassification and/or whistleblower accounts.
Sources
Show 15 more sources
Further Reading
- articleNord Stream Pipeline Sabotage Timeline — BBC News (2022)
- articleHersh: Nord Stream article — Seymour Hersh (2023)
- articleNYT: US had intelligence on Ukrainian plan — Julian Barnes et al. (2023)
- articleWSJ: Ukrainian officer orchestrated attack — Bojan Pancevski (2024)
In Pop Culture
Nord Stream: Power, Politics, and the Pipeline Wars
Bobo Lo
Policy analyst's survey of the Nord Stream project history and its destruction, placing attribution debates in the context of Russian energy coercion and NATO alliance politics.
Update Log
- November 2026: German federal prosecutors have indicted a Ukrainian former military officer over the sabotage and his trial opened in Hamburg on 14 October 2026; a second suspect is contesting extradition from Croatia. No court has yet ruled on who planned the attack.