Baltic sea mystery deepens: how vulnerable are Europe’s undersea internet cables to sabotage?

Swedish authorities have opened a preliminary sabotage investigation after damage was discovered on an undersea telecommunications cable in the Baltic Sea, intensifying concerns about the resilience of Europe’s critical infrastructure. The affected link, operated by Finnish telecommunications company Cinia, sits within Sweden’s exclusive economic zone near the island of Gotland and connects Finland with Germany. Cinia has confirmed that data traffic continues via alternative routes even as the physical damage is assessed, and Sweden’s coast guard has dispatched assets to the site.

Officials have not determined the cause, but the incident adds to a growing list of disruptions involving submarine cables and energy interconnectors across the Baltic Sea. Given the wartime security backdrop, regional authorities are treating the case with heightened caution while coordinating with neighbours to protect communications and power flows.

Why are Baltic Sea undersea cables increasingly becoming a strategic target for adversaries and opportunistic actors?

The Baltic Sea carries dense webs of fibre-optic cables and energy lines that underpin internet connectivity, financial transactions, emergency communications and cross-border power trade. Since Russia’s full-scale invasion of Ukraine in 2022, the region has seen elevated military surveillance and stepped-up maritime monitoring by European Union and North Atlantic Treaty Organization partners. Swedish leaders have framed the latest break near Gotland within that wider security lens and signalled deeper coordination with European allies to safeguard critical infrastructure.

Brussels has also prioritised resilience measures for subsea assets, from faster repair timelines to tighter operating protocols for vessels near sensitive corridors. While the precise policy mix is still evolving country by country, the emphasis on joint situational awareness and rapid response has clearly risen after successive incidents since 2022.

What patterns stand out in recent Baltic Sea undersea disruptions across telecom and energy networks?

The suspected sabotage of the Nord Stream gas pipelines in September 2022 marked a watershed in risk perceptions, with European officials long pointing to deliberate explosions even as criminal cases remain complex. In October 2023, investigators in Finland said damage to the Balticconnector gas pipeline, as well as to an associated telecom cable link, was likely caused by a heavy anchor dragged by the Hong Kong-flagged container ship NewNew Polar Bear. They have not stated whether the act was intentional.

More recently, two fibre-optic cables in the Baltic, including Cinia’s C-Lion1 between Finland and Germany, were cut in Swedish waters on November 17–18, 2024, prompting probes by Sweden, Finland and partner agencies. Those cuts reinforced concerns about deliberate interference and the difficulty of attribution in busy sea lanes.

On December 25, 2024, the Estlink 2 power cable between Finland and Estonia was also damaged, with authorities initially investigating whether a Russia-linked tanker might have dragged its anchor over the seabed. The interruption came alongside reports of other telecom line damage in the region and spurred fresh calls for better protection of subsea corridors.

How is NATO responding to heightened undersea infrastructure risk in the Baltic Sea?

To deter further attempts to damage cables and pipelines and to compress response times when anomalies occur, NATO launched Baltic Sentry in January 2025. The mission increases allied naval presence, uses maritime patrol aircraft and undersea drones, and coordinates across coast guards, police and commercial operators via NATO’s centre focused on critical undersea infrastructure. Early reporting indicates that the deterrent posture and shared protocols are already improving reaction speed to suspicious movements.

While allied officials have repeatedly voiced concern about Russian hybrid tactics at sea, they also acknowledge the evidentiary challenge of proving intent when commercial vessels, rough weather or navigational errors may be involved. That tension, high suspicion versus high standards of proof, is shaping how governments talk about attribution.

Could there be non-hostile explanations for the new cable damage near Gotland and how common are such faults worldwide?

Industry statistics show that most cable faults globally are unintentional. The International Cable Protection Committee estimates around 150–200 cable faults per year, and industry and agency summaries indicate roughly 70–80% result from fishing trawls or vessel anchoring rather than malicious actions. Those baselines are important context whenever a single fault is discovered, even in a geopolitically tense area like the Baltic.

That said, the geographic clustering of incidents across 2022–2024 has plainly elevated risk awareness among Baltic governments and network operators, driving redundancy planning, route diversification and more aggressive monitoring postures at sea.

What happens next in the Swedish probe and what are the broader implications if sabotage is proven?

Sweden’s preliminary sabotage case unlocks investigative tools to secure evidence, analyse maritime traffic and sonar data, and coordinate with neighbouring services. Cinia has maintained service continuity by rerouting traffic, but it will still need inspection and repair windows for the damaged span. If investigators substantiate deliberate interference, regional capitals could escalate protective measures, reinforce sanctions against responsible actors, and expand Baltic Sentry-style coordination even further.

For Finland and Germany, the endpoints of the affected C-Lion1 link, any finding of sabotage would accelerate investments in resilience, added route diversity, pre-positioned repair capacity and enhanced surveillance along high-value corridors. Because these cables carry not just civilian internet traffic but also data that underpins energy trading, banking, emergency services and defence communications, even localised physical damage has outsized strategic consequences.

What resilience measures are most likely to reduce risk across Europe’s subsea network in the near term?

Based on recent policy emphasis and operator experience, several measures stand out. Surveillance and rapid response can be improved through more unmanned underwater vehicles, satellite-aided vessel tracking and harmonised alerting among navies, coast guards and cable owners, as codified under Baltic Sentry. Faster repairs could be enabled by pre-arranged maintenance vessels and spare-parts staging in the Baltic to shorten mean time to repair. Route diversification and redundancy, including additional paths for both telecom and power links across the Nordic-Baltic corridor, would further reduce vulnerability. These steps reflect lessons distilled over the past two years and are already being integrated into allied playbooks.

The incident off Gotland will test how quickly that evolving framework can turn detection into certainty and certainty into deterrence. Whether this break proves accidental or intentional, the policy trajectory is unmistakable. Europe is moving to treat the seabed the way it treats the sky and cyberspace, not as a void but as mission-critical terrain.