Analysis
In the 2018 Economist interview, Stoltenberg said NATO treats cyberspace as a domain of operations and that a cyberattack meeting certain criteria could invoke Article 5. However, NATO has never adopted a formal rule that any cyberattack automatically triggers Article 5; the decision remains case‑by‑case, as outlined in the 2016 Warsaw summit declaration and subsequent NATO guidance. Thus, the claim overstates the alliance’s position.
Background
NATO recognized cyberspace as an operational domain at the 2016 Warsaw summit and stated that a cyberattack could be considered an armed attack under Article 5 if its effects are comparable to a kinetic attack. The alliance retains discretion to assess each incident’s severity before invoking collective defence. Stoltenberg’s 2018 remarks reflected this policy nuance.
Verdict summary
Stoltenberg noted that NATO could invoke Article 5 for a cyberattack, but there is no blanket agreement that any cyberattack automatically triggers Article 5.