The Silent Front: Cable Crisis in the Baltic Sea

This analysis examines the structural factors shaping Europe’s subsea cable security environment following recent incidents in the Baltic Sea.

On 31 December 2025, Finnish special forces boarded a cargo vessel in the Baltic Sea suspected of dragging its anchor across submarine cables linking Finland and Estonia. The ship, the Fitburg, became the latest case in a growing series of incidents affecting European subsea infrastructure. Since October 2023, Russia’s so called shadow fleet has severed and damaged at least eleven cables in the Baltic region (Defense News, 2025). The operational pattern has remained consistent. A commercial vessel operating in international waters drags its anchor across the seabed, causing damage to cables. Attribution remains difficult under maritime law, and repairs frequently take weeks.

On 5 February 2026, the European Commission introduced a €347 million subsea infrastructure initiative together with a Cable Security Toolbox (European Commission, 2026). The package represents the largest EU level investment to date in subsea cable protection. Its measures focus primarily on surveillance, coordination between member states, and the deployment of new infrastructure through the Connecting Europe Facility. However, structural vulnerabilities remain in three areas: attribution and legal jurisdiction, ownership of infrastructure, and repair capacity following disruptions.

The Threat Pattern: Plausible Deniability as Operational Method

Recent incidents in the Baltic Sea illustrate a recurring pattern of damage to critical infrastructure under conditions that complicate attribution. In October 2023, Finnish authorities linked impairment to the Balticconnector gas pipeline and nearby telecommunications cables to the Chinese flagged vessel Newnew Polar Bear. In November 2024 the vessel Yi Peng 3 dragged its anchor across approximately 300 kilometers of seabed, severing two telecommunications cables between Sweden and Lithuania. On 25 December 2024 the tanker Eagle S, registered in the Cook Islands and linked to Russian energy transport networks, damaged the EstLink-2 electricity cable together with three data cables connecting Finland and Estonia (gCaptain, 2026). The Fitburg case occurred shortly afterwards (The Register, 2026).

NATO maritime monitoring operations in the Baltic Sea have reported that several incidents involved anchors dragged for unusually long distances along the seabed, in some cases extending hundreds of kilometers. Operational assessments indicate that such distances exceed those typically associated with accidental anchoring events (CNN, 2025). The frequency of incidents, eleven disruptions within roughly fifteen months, suggests a sustained pattern of infrastructure interference even when legal attribution remains contested.

Maritime jurisdiction adds an additional layer of complexity. In October 2025 a court in Helsinki dismissed charges related to the Eagle S incident because Finland lacked sufficient jurisdiction under existing maritime law frameworks. The case illustrated limitations in the legal mechanisms available to coastal states when infrastructure damage occurs in international waters or involves vessels registered under foreign flags.

Ownership Asymmetry in Transatlantic Connectivity

Beyond the immediate security incidents, the structure of subsea cable ownership introduces an additional strategic dimension. Over the past decade, large technology companies based in the United States have expanded their role in financing and operating transatlantic cable systems. In 2014 hyperscale cloud providers including Google, Meta, Microsoft, and Amazon controlled roughly 10% of transatlantic cable capacity. By 2024 this share had increased to approximately 90% (European Commission Expert Group, 2025). In the same year these companies accounted for 71% of international capacity used by EU member states.

During this period overall cable capacity connecting Europe also increased significantly. EU capacity rose from approximately 318 terabits per second in 2010 to 3,755 terabits per second in 2024. Much of this expansion, however, was financed through private investment by hyperscalers rather than by European telecommunications operators. Infrastructure owned by traditional European operators now represents roughly 2% of total transatlantic capacity (European Commission Expert Group, 2025).

The European Commission’s expert group on submarine cable infrastructure concluded that EU member states are becoming increasingly dependent on non-European actors for connectivity with North America. This structural dependency exists despite the presence of European engineering companies such as Alcatel Submarine Networks, which remain major global suppliers for cable installation and manufacturing. Installation capacity does not necessarily translate into ownership or operational control once cables enter service (Carnegie Endowment for International Peace, 2024).

The Operational Reality of Cable Repair

Understanding the strategic impact of cable disruptions requires examining the operational process involved in repairing subsea infrastructure. Cable repair is a complex maritime engineering operation that involves several stages and relies on a limited global fleet of specialized vessels. When a cable failure occurs, operators first attempt to locate the break using optical time domain reflectometry. Optical pulses are transmitted through the fiber to determine the distance to the fault. In cases involving anchor dragging or extended physical damage, identifying the precise location may take several hours.

A cable repair vessel must be mobilized after the fault is located, representing a significant operational bottleneck. Approximately 75 cable ships operate worldwide, many of them aging and largely owned by private companies (Lawfare, 2025). The cost of constructing a single repair vessel can exceed €50 million, and the commercial repair market operates with relatively narrow profit margins. As a result, the number of vessels maintained for repair operations generally corresponds to the level required for routine accidental faults rather than large scale or simultaneous disruptions (Data Centre Dynamics, 2022).

Once a vessel reaches the damaged site, the physical repair process begins. Specialists tow a grapnel device across the seabed to retrieve the cable, and separate the damaged resurfaced segment. Specialized optical adhesives splice the replacement cable sections and reconnect the individual glass fibers. Each joint may require up to sixteen hours to complete before the cable can be redeployed and tested (KIS-ORCA, n.d.). Under favorable conditions in the Baltic Sea, the full process from incident to restoration typically requires at least fourteen days. Globally, the median repair time for submarine cable faults is estimated at approximately 40 days (Bulletin of the Atomic Scientists, 2025). Weather conditions, access restrictions, or simultaneous incidents can extend this timeframe.

The European Commission’s subsea cable package includes a €20 million Rapid Repair Pilot project for the Baltic Sea, representing approximately 5.7% of the overall funding allocation (European Commission, 2026). The initiative focuses on pre-positioning modular repair equipment in regional ports. The equipment itself still requires specialized vessels for deployment.

Reactive Security and Structural Vulnerability

The Cable Security Toolbox combines infrastructure investment with coordination mechanisms among EU member states. Approximately €327 million is allocated through the Connecting Europe Facility to support the development of new cable infrastructure, while NATO’s Baltic Sentry maritime monitoring mission has increased surveillance activity in the region since early 2025 (European Commission, 2026; NATO, 2025).

Surveillance and maritime monitoring can reduce uncertainty regarding vessel behavior in proximity to subsea infrastructure. However, the incidents recorded since 2023 occurred in environments where monitoring mechanisms were already operational. Detection capabilities therefore do not necessarily prevent damage once a vessel interacts physically with seabed infrastructure.

The time gap between disruption and restoration remains significant. Cable damage may occur within minutes, while repairs require days or weeks depending on vessel availability and weather conditions. During this period the affected cable remains offline, forcing traffic to be rerouted through redundant systems or alternative routes. In regions with dense cable networks such rerouting can mitigate immediate disruptions, whereas in areas with limited redundancy the operational impact may be more pronounced.

Subsea cable systems carry more than 95% of global intercontinental data traffic, including financial transactions, cloud services, and military communications (European Commission Expert Group, 2025). As digital infrastructure becomes increasingly central to economic and security systems, disruptions to these networks have wider strategic implications.

Recent Baltic incidents illustrate the interaction between physical vulnerability, legal complexity, and infrastructure ownership patterns. Together these factors shape the operational environment in which subsea cable security is currently managed.

Policy Recommendations

Two structural interventions are required to move Europe from reactive to resilient. First, the EU should establish a sovereign cable repair fleet. Not port-stationed modular equipment, but dedicated state-backed vessels operating under an EU or joint national mandate, analogous to the logic already applied to joint air defense procurement. The commercial repair market cannot supply this capacity under adversarial conditions; it is structurally incentivised against maintaining surge capacity above routine fault-rate requirements. New EU funding instruments, including the next Multi-annual Financial Framework from 2028 onwards, should include a dedicated line for a public-private repair fleet program. Second, the EU must pursue reform of maritime jurisdiction frameworks to permit prosecution of infrastructure sabotage regardless of a vessel’s flag state, closing the enforcement gap exposed by the Eagle S dismissal in October 2025.

Both recommendations address the same underlying reality: deterrence that cannot be enforced, and infrastructure that cannot be quickly restored, does not constitute security.

Bibliography

Bulletin of the Atomic Scientists (2025) ‘To keep the world’s data flowing, countries need to quickly fix broken undersea cables’, 30 July. Available at: https://thebulletin.org/2025/07/to-keep-the-worlds-dataflowing-countries-need-to-quickly-fix-broken-undersea-cables/

Carnegie Endowment for International Peace (2024) Securing Europe’s Subsea Data Cables, December. Available at: https://carnegieendowment.org/research/2024/12/securing-europes-subsea-datacables

CNN (2025) ‘Ships, sea drones and AI: How NATO is hardening its defense of critical Baltic undersea cables’, 27 January. Available at: https://edition.cnn.com/2025/01/27/europe/nato-baltic-sentry-underseacables-intl

Data Centre Dynamics (2022) ‘The cable ship capacity crunch’, 6 December. Available at: https://www.datacenterdynamics.com/en/analysis/the-cable-ship-capacity-crunch/

Defense News (2025) ‘11 Baltic cables damaged in 15 months, pushing NATO to boost security’, 28 January. Available at: https://www.defensenews.com

European Commission (2026) Commission increases submarine cable security with €347 million investment and new toolbox, 5 February. Available at: https://digitalstrategy.ec.europa.eu/en/news/commission-increases-submarine-cable-security-eu347-millioninvestment-and-new-toolbox

European Commission Expert Group (2025) Security and Resilience of EU Submarine Cable Infrastructures: Mapping, Risk Assessments, Stress Tests. Brussels: European Commission.

gCaptain (2026) ‘Baltic Shadow Games: Finland Detains Cargo Ship in Suspected Hybrid Attack’, 2 January. Available at: https://gcaptain.com/baltic-shadow-games-finland-detains-cargo-ship-in-suspectedhybrid-attack/

Heise Online (2025) ‘Submarine Cables: EU Warns of Dependence on US Hyperscalers’, 23 October. Available at: https://www.heise.de

KIS-ORCA (n.d.) Maintenance / Repair Operations. International Cable Protection Committee. Available at: https://kis-orca.org/subsea-cables/maintenance-repair-operations/

Kessler, O. and Rosen, A. (2025) ‘Europe’s Undersea Opportunity’, Lawfare, 20 April. Available at: https://www.lawfaremedia.org/article/europe-s-undersea-opportunity

NATO (2025) ‘NATO launches Baltic Sentry to increase critical infrastructure security’, 14 January. Available at: https://www.nato.int/cps/en/natohq/news_232090.htm

Safety4Sea (2025) ‘EU explores funding for fleet to fix damaged undersea cables’, 20 February. Available at: https://safety4sea.com/eu-explores-funding-for-fleet-to-fix-damaged-undersea-cables/

The Register (2026) ‘Finnish cops grill crew of ship suspected of undersea cable cut’, 2 January. Available at: https://www.theregister.com

The War Zone (2025) ‘First Ship Seized For Undersea Cable Cutting Since NATO’s Baltic Sentry Began’, 31 December. Available at: https://www.twz.com/news-features/first-ship-seized-for-undersea-cablecutting-since-natos-baltic-sentry-began