NATO’s Article 5 Triggered for First Time in Cyberattack: Collective Defense Response Initiated
What: For the first time in its history, the North Atlantic Treaty Organization has formally invoked Article 5 of its founding treaty, declaring a cyberattack against a member state an armed attack, thereby triggering a collective defense response.
When: The decision was announced on Wednesday, 23 October 2024, following an emergency session of the North Atlantic Council.
Where: The cyberattack targeted critical infrastructure within the territory of Estonia, a NATO member, with spillover effects disrupting digital services across several Baltic states.
Who: The attack, attributed to a non-state actor with alleged links to a hostile foreign government, prompted Estonian Prime Minister Kaja Kallas to request the invocation under Article 5.
Why: NATO’s ambassadors unanimously agreed that the severity and scale of the attack, which crippled Estonia’s power grid and communication networks, met the threshold of an armed attack, marking a historic precedent in cybersecurity and collective defense policy.