Danish intelligence officials have publicly blamed Moscow for orchestrating cyberattacks that targeted a local water utility and disrupted online access ahead of recent elections. The Danish Defence Intelligence Service released a report detailing how pro-Russian hacking groups infiltrated systems, marking the first time Copenhagen has directly attributed such incidents to the Russian state.
In late 2024, hackers linked to the group Z-Pentest gained control of the Tureby Alkestrup Waterworks near Copenhagen. They manipulated water pressure settings, causing multiple pipes to burst in the town of Køge. Around 50 households went without water for seven hours, while several hundred more experienced shorter outages. Jan Hansen, the head of the waterworks, later pointed out that the facility had switched to a cheaper cybersecurity provider, leaving it exposed.
Separately, in November, the group NoName057(16) launched denial-of-service attacks that overwhelmed websites belonging to political parties, municipalities, public institutions, and even a defense company. These strikes came just before Denmark’s municipal and regional elections, aiming to sow disruption during a key democratic process.
“The Russian state uses both groups as instruments of its hybrid war against the West,” the intelligence service stated. “The aim is to create insecurity in the targeted countries and to punish those that support Ukraine.”
Denmark has been a steadfast ally to Ukraine, providing military aid and even hosting training for pilots on F-16 jets. This support appears to have made the country a prime target in Russia’s broader campaign of intimidation across Europe.
Similar incidents have cropped up elsewhere. In Norway, pro-Russian actors opened valves at a dam earlier this year, releasing massive amounts of water to demonstrate their reach without causing catastrophe. Western officials track hundreds of such sabotage efforts, from arson to cyber intrusions, tied back to Moscow since the full-scale invasion of Ukraine began.
Torsten Schack Pedersen, Denmark’s minister of resilience and preparedness, noted that while the physical damage remained limited, the attacks exposed serious gaps. “It shows that there are forces capable of shutting down important parts of our society.”
The waterworks incident stemmed in part from cost-cutting on security measures. Hansen urged other utilities to prioritize robust protections and consider cyber insurance, warning that skimping invites disaster.
These events fit into a pattern where Russia probes weaknesses in everyday infrastructure—power grids, water supplies, transportation—to remind nations of their vulnerabilities. Families rely on clean water and stable services; when foreign powers tamper with them, even briefly, it erodes trust and stability.
In response, Denmark summoned the Russian ambassador, joining Germany and others in confronting Moscow diplomatically over alleged interference. As threats mount, the need for strong defenses in critical sectors grows ever more urgent, protecting the foundations that allow societies to function in peace.
