DK Havenergi
DK Vindkraft
DK Solenergi
DK PtX
DK Innovation
DK CCS
Minister of Defense Troels Lund Poulsen (V) says at a press conference on Thursday afternoon that pro-Russian groups with connections to the Russian state are behind cyberattacks in Denmark.
Nils Meilvang/Ritzau Scanpix

FE: Cyberattacks against waterworks and KV25 were Russian

Two cyberattacks against Denmark were carried out by pro-Russian groups with connections to the Russian state, FE assesses.
18. DEC 2025 17.31
Beredskab
IT
Sikkerhed
Teknik & Miljø

The Danish Defence Intelligence Service assesses that two cyberattacks in Denmark were carried out by pro-Russian groups with connections to the Russian state. This was stated by Defence Minister Troels Lund Poulsen (V) at a press conference on Thursday afternoon.

- The Danish Defence Intelligence Service can now attribute two cyberattacks in Denmark to two pro-Russian groups, both of which have connections to the Russian state, he says.

One attack concerns an attack on a Danish waterworks in 2024 near Køge. Here, the water pressure was affected, causing water pipes to burst. Several customers therefore lacked water.

The second attack was a congestion attack against websites in connection with the municipal and regional elections in November.

Here, several municipalities experienced their websites going down as a consequence of congestion.

Unacceptable

- It is completely unacceptable that hybrid attacks are being carried out in Denmark by the Russian side, says Troels Lund Poulsen.

The attacks have had limited damage, but it shows serious prospects, says Minister of Emergency Situations Torsten Schack (V).

- It shows that there are forces that are capable of shutting down important parts of our society.

The Danish Defence Intelligence Service names the hacker groups.

They assess that the pro-Russian group Z-Pentest was behind the attack on the waterworks.

Behind the attack on the websites in the municipal and regional elections in November were the group NoName057(16), it says.

Based on intelligence, the service is quite confident in its case.

- We assess that it is very likely, and that means that we are very sure that these are pro-Russian groups that have connections to the Russian state, says FE leader Thomas Ahrenkiel at the press conference.

Denmark is not sufficiently equipped to withstand the attacks from Russia, the government acknowledges.

- I think you have to be thunderously naive if you think that we are on target when it comes to cybersecurity, says Torsten Schack.

/ritzau/

Text, graphics, images, sound, and other content on this website are protected under copyright law. DK Medier reserves all rights to the content, including the right to exploit the content for the purpose of text and data mining, cf. Section 11b of the Copyright Act and Article 4 of the DSM Directive.

Customers with IP agreements/major customer agreements may only share Danish Offshore Industry articles internally for the purpose of handling specific cases. Sharing in connection with specific cases refers to journaling, archiving, or similar uses.

Customers with a personal subscription/login may not share Danish Offshore Industry articles with individuals who do not themselves have a personal subscription to Danish Offshore Industry.

Any deviation from the above requires written consent from DK Medier.

https://www.doi.dk/en/solenergi/artikel/fe-cyberangreb-mod-vandvaerk-og-kv25-var-russiske

GDPR