Denmark raises cyber threat level to high, citing likely Russian attacks

Denmark has elevated its cyber threat level for destructive cyberattacks from medium to high, citing a heightened risk of Russian aggression. The Danish Defence Intelligence Service warned that Russia is likely to intensify its hybrid warfare against Western nations and NATO in the coming months, with potentially severe consequences.

The decision to raise the threat level was prompted by the Danish cyber agency's assessment that Russia will likely attempt destructive cyberattacks. The agency also warned of a "low but rising risk" of Russia launching a limited military attack against one or more NATO countries on its borders.

According to the Danish Police Intelligence Service, specific Russian planning and preparation for sabotage targeting Denmark have been identified. Laila Reenberg, head of the Danish cyber agency, stated that destructive cyberattacks could affect critical societal functions, impacting authorities, companies, and citizens. These attacks could include wiper attacks to destroy data or manipulations of operational technology.

This move by Denmark is reportedly the first time an EU country has publicly and formally increased its cyber threat level due to increased Russian hybrid activity. The warnings come amid a broader increase in Russian hybrid activities across Europe since the full-scale invasion of Ukraine in 2022, including cyberattacks, disinformation campaigns, and sabotage attempts. Recent incidents include Germany blaming Russia for explosive-laden drones at an airport and Poland scrambling fighter jets after a Russian helicopter entered its airspace.

In 2024, pro-Russian hackers with alleged ties to the Kremlin attacked a small Danish waterworks, temporarily cutting off water supply to 450 houses.