The threat from cybercrime and espionage against Denmark remains “very high,” according to a new national assessment for 2025. Authorities warn that Danish institutions, companies, and individuals continue to face constant attacks from both state-sponsored and criminal actors.
Cyber Threat Level Remains at Its Highest
Denmark’s Agency for Public Safety (Styrelsen for Samfundssikkerhed) has released its annual threat report for 2025, keeping the nation’s cyber risk at the top of its five-tier scale. The evaluation confirms that the overall danger is unchanged since last year, but the methods and motives behind attacks continue to evolve.
The agency reported that foreign entities and organized cybercriminals target both public and private sectors every day. Data theft, extortion, and attacks on essential systems are especially common. Danish authorities recognize that even with stronger defenses, the number and sophistication of incidents are rising.
The new report succeeds earlier assessments from the Danish Center for Cybersecurity, which now operates under the Agency for Public Safety. The agency’s expanded mandate reflects Denmark’s goal of coordinating nationwide preparation for digital threats, including those that could disrupt vital infrastructure such as energy, communications, and water systems.
Six New Categories of Cyberattacks
For the first time, the agency breaks down the cyber threat into six specific attack types: ransomware, data theft, digital fraud, denial-of-service attacks (DDoS), manipulation of operational technology, and destructive “wiper” incidents that erase data permanently.
Each category has its own level of probability and potential damage. The assessment concludes it is “very likely” that Danish organizations will face renewed attempts at data theft and extortion. The motives range from espionage by foreign governments to profit-driven extortion schemes, where criminals steal large data sets and sell them on the dark web or demand payment for their return.
Ransomware remains a significant issue. Attackers often encrypt victims’ systems to block access to files or operations until a ransom is paid. Meanwhile, DDoS attacks continue to overburden websites and servers, sometimes paralyzing municipal services or voter information portals. In late 2024, several such attacks occurred around local and regional elections, claimed by pro-Russian hackers seeking disruption.
Expanding Risk and Evolving Techniques
Despite no major cyberterror threat, the number of cyber incidents hitting Denmark reached a record high in 2024. The agency notes that hackers constantly adjust their strategies, making protection a moving target.
Targets vary widely. Entities tied to foreign and security policy face particular danger, but nearly everyone—from small businesses to individuals—can become a victim. The agency stresses that vigilance and education remain some of the most effective defenses.
Interestingly, the report emphasizes that digital crime no longer focuses only on stealing money or data. Increasingly, attackers are motivated by political influence, seeking to erode trust in public institutions. This broader perspective makes cybersecurity a national concern tied directly to democratic stability and social resilience.
The Danish government continues to invest in resilience plans and regional support initiatives to strengthen local response capacity. Officials are also urging private companies to establish clearer contingency procedures and share attack data to improve national situational awareness.
No Signs of Cyberterrorism, Yet Heightened Criminal Activity
While there is still no identified cyberterrorist threat against Denmark, criminal activity shows no sign of slowing. Ransomware cases against Danish businesses and public bodies set new records last year, reflecting a global trend of intensifying digital crime.
The agency’s experts acknowledge that public awareness and improved cooperation between sectors are essential to staying safe. That includes both technical safeguards and better security habits in everyday online behavior.
Denmark’s digital security challenges are part of a larger global pattern. Still, as a highly connected country with advanced digital infrastructure, Denmark remains especially exposed. For now, the message is clear: the cyber threat is not diminishing, only changing shape.
Sources and References
The Danish Dream: Cyber Threats in Denmark Target Water Systems Daily
The Danish Dream: Security in Denmark for Foreigners
DR: Fortsat meget høj trussel fra cyberkriminalitet mod Danmark
