Cyber incident halts work on Fehmarnbelt tunnel
The builder of the link between Denmark and Germany has shut down central systems.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
The construction consortium behind the Fehmarnbelt tunnel has been hit by a cyber incident. As a result, work has reportedly come to a standstill, while it is not yet known who is behind the incident or how extensive the damage is.
Femern Link Contractors, the consortium building the tunnel, has informed Sund & Bælt of a cyber incident. Sund & Bælt is the Danish state-owned company overseeing the infrastructure link. The company says it is in consultation with the contractor, but is providing few details so far.
According to reports from Denmark and Sweden, central IT systems have gone down. Electronic access passes reportedly do not work, and employees were advised not to use computers or wireless networks. Several work vessels are also said to be standing idle.
The information about the operational consequences comes partly from regional reporting and has not yet been fully confirmed by the project organisation. Sund & Bælt has confirmed that the contractor was hit by a cyber incident. It is therefore too early to speak of lasting damage or a delay to the completion date.
The Fehmarnbelt tunnel will be an approximately eighteen-kilometre link between the Danish island of Lolland and the German island of Fehmarn. The tunnel is intended to become an important route between Scandinavia and Central Europe, for both rail and road traffic.
The incident comes at a time when European countries are paying increased attention to digital attacks against vital infrastructure. Denmark has previously warned of an elevated threat of destructive cyberattacks, but there is no indication that Russia or any other state is behind this specific incident.
The case is relevant to Dutch companies because the tunnel will become part of a European transport corridor. A disruption at a construction site can affect not only the schedule, but also subcontractors, shipping and future logistics links. An investigation into the attack must first establish whether only office and access systems were affected, or also systems directly controlling the construction process.
One story, several perspectives
What is established
- The tunnel contractor reported a cyber incident.
- Multiple sources report system outages and disruption to work.
- The perpetrators and the full extent are unknown.
- The tunnel is a major future link between Denmark and Germany.
Left
Arguments Vital infrastructure requires public oversight, transparency and strict security requirements for private contractors. Companies building public links should report incidents quickly and in full.
Values Public control, safety, transparency and protection of workers and society.
Consequences More oversight and investment may make construction more expensive, but according to this view they reduce the social damage caused by digital outages.
Centre
Arguments The first priority is recovery and an independent technical investigation. Governments should set proportionate requirements and draw conclusions about perpetrators, liability or geopolitical escalation only after the facts have been established.
Values Procedural diligence, proportionality and continuity of public services.
Consequences A cautious approach prevents hasty accusations, but may temporarily provide less clarity for companies and local residents.
Right
Arguments Infrastructure projects must be resilient to attacks without decision-making being paralysed by additional bureaucracy. Contractors and operators should primarily invest in security and operational backups themselves.
Values Individual responsibility, efficiency, national security and limited government intervention.
Consequences Giving companies more responsibility may lead to practical measures more quickly, but could also result in differences in security standards between contractors.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The reporting confirms the cyber incident and the contractor involved. Operational consequences are presented as reported information, not as a fully independently established fact.
- confirmed Femern Link Contractors reported a cyber incident to Sund & Bælt. — Sund & Bælt confirmed this through project communications. source
- confirmed Central systems, access passes and work vessels were reportedly affected. — Reported by News Øresund and Cadena SER; the full extent has not been officially explained. source
- confirmed The identity of the attackers is unknown. — No source names an identified perpetrator. source
- confirmed The tunnel will be approximately eighteen kilometres long and will connect Denmark with Germany. — Project information from Femern A/S. source
- confirmed There is no evidence that Russia is behind this specific incident. — The current sources consulted report no attribution; the text formulates this as an absence of confirmation. source
Editor's note
It has been confirmed that the contractor reported a cyber incident. The full extent, precise outages, perpetrators and consequences for the schedule have not yet been established.Sources
- Fehmarn Bält-bygget drabbat av cyberattack — News Øresund
- Dinamarca investiga un ciberataque contra las obras del túnel submarino más largo del mundo — Cadena SER
- The Fehmarnbelt tunnel — Femern A/S
More on this in Dutch media
- RTL Nieuws — „cyberaanval fehmarnbelt”
- NOS — „cyberaanval fehmarnbelt”
- Het Parool — „cyberaanval fehmarnbelt”