Denmark’s intelligence service says two major cyberattacks on Danish infrastructure were carried out by pro-Russian hacker groups linked to the Russian state. The government is summoning the Russian ambassador, calling the incidents unacceptable.
Cyberattacks Traced to Russian-Linked Groups
Denmark’s Defense Intelligence Service has determined that two significant cyberattacks targeting Danish institutions in 2024 were executed by pro-Russian groups closely connected to the Kremlin. Officials say these attacks mark a serious escalation in hostile digital activity against Denmark.
One attack targeted a water utility near Køge in 2024, causing water pipes to burst after hackers manipulated water pressure. The incident left residents without running water for hours. The second attack involved large-scale denial-of-service strikes on municipal websites during the local and regional elections in November, which caused several government sites to crash.
According to Danish authorities, both incidents were assessed as deliberate attempts to disrupt basic services and undermine public trust. The defense ministry now attributes these intrusions to two hacker collectives: Z-Pentest, allegedly behind the water facility attack, and NoName057(16), linked to the website disruptions.
Political and Diplomatic Fallout
The Danish government intends to summon the Russian ambassador to a formal meeting over the attacks. Denmark’s defense minister described the incidents as direct hybrid aggression against the country, saying such behavior from Russia cannot be tolerated.
At the same time, the minister responsible for civil protection noted that even though the overall damage was contained, the events highlight the vulnerability of modern infrastructure. He warned that malicious actors have the ability to disrupt key elements of daily life.
These revelations follow a similar wave of digital assaults earlier this year, including widespread attacks on hospitals and municipalities described in cyberattacks hitting Danish hospitals and city systems.
Growing Cybersecurity Concerns
Authorities say the Defense Intelligence Service’s investigation leaves little doubt about the attackers’ origins. Intelligence chief Thomas Ahrenkiel described the findings as highly probable, confirming close ties between the hacker groups and Russian state actors.
Because of that, Danish cyber defense capabilities are under renewed scrutiny. Agencies are urging both public and private sectors to review their security systems, particularly as election infrastructure and local utilities have become targets.
In contrast to traditional espionage, these cyberattacks are seen as part of a broader hybrid warfare strategy: combining digital sabotage, disinformation, and pressure on democratic institutions. Experts believe Denmark’s strong digital integration across public services makes it both efficient and vulnerable.
Wider European Context
Other European countries have also accused Moscow-linked groups of similar attacks on critical networks and election platforms. Denmark’s case adds to growing evidence that such operations are coordinated within Russian information warfare efforts.
Even though damage in Denmark was quickly contained, the symbolic message remains powerful. The episodes show that small, seemingly localized disruptions—like cutting water pressure or blocking city websites—can create real insecurity among citizens.
For residents and institutions alike, the incidents serve as a reminder of the country’s exposure to geopolitical conflicts fought through keyboards rather than conventional weapons.
Experts across Europe now see Denmark as part of a digital frontline, especially after the recent security concerns raised in Denmark’s digital safety landscape involving foreign-targeted espionage and ransomware.
Next Steps for Denmark
The government has promised additional funding for cybersecurity programs and better information-sharing between intelligence agencies and municipal IT departments. Emergency exercises are being updated to prepare for future incidents.
While officials stress that essential services remain secure, they also acknowledge that the line between peace and digital conflict is thin. As Denmark strengthens defenses, it must balance open digital governance with the need for strict protection from external interference.
Sources and References
The Danish Dream: Denmark Under Siege – Cyberattacks Hit Hospitals, Cities
The Danish Dream: Security in Denmark for Foreigners
DR: FE tilskriver cyberangreb pro-russere med forbindelse til staten
