Subsea cable security in the Baltic and North Sea, 2023-2026

This report covers subsea cable and pipeline security in the Baltic and North Sea from October 2023 to September 2026. It focuses on what actually happened in each incident, how attribution and prosecution have played out in court, what repairs have cost and how long they have taken, how insurers and regulators are responding, and what has changed for operators, insurers and governments as a result.

Nearly every confirmed or suspected incident follows the same mechanism: a bulk carrier or tanker, often linked to Russia's sanctions-evading 'shadow fleet,' drags an anchor across the seabed for tens of kilometres, severing one or more cables or pipelines in a single pass. Attribution to a specific vessel has usually come quickly; attribution of intent, and successful prosecution, has not.

The November 2024 case is the clearest illustration of the attribution gap: the Yi Peng 3 disabled its AIS transponder for 7.5 hours while transiting both damage sites, and European investigators were allowed aboard only as observers, more than a month later. US intelligence concluded the cables were not cut deliberately; some European officials disagreed. No charges followed, and both damaged cables were nonetheless restored within about ten days.

The most recent confirmed incident, the Fitburg case, shows the same pattern playing out again: 14 crew members (nationals of Russia, Georgia, Kazakhstan and Azerbaijan) were detained after the 31 December 2025 damage to Elisa's Helsinki-Tallinn cable, and the captain and bosun were charged with aggravated criminal damage and interference with telecommunications. Prosecutors allege a roughly 130 km anchor drag and are seeking prison terms of at least two and a half years when the case went to trial on 8 September 2026.

Investigators can usually identify the responsible vessel within days using AIS tracking, anchor-trail mapping and physical anchor inspection - Finland's Coast Guard mapped the Fitburg's drag trail to 'several tens of kilometres,' for example, and Finland boarded and seized the Eagle S itself within a day of the Estlink 2 damage. What has proven far harder is proving intent, and establishing which state has jurisdiction to prosecute.

UNCLOS Articles 112-115 protect cables on the high seas and in exclusive economic zones, but not in territorial seas, where coastal-state sovereignty governs instead - a structural gap that leaves most near-shore anchor-drag damage to domestic law alone. In the Eagle S case, Finland's own district court read UNCLOS Articles 97 and 113 as reserving jurisdiction to the vessel's flag state (Cook Islands) or the crew's nationality states - not Finland - and dismissed all charges in October 2025, even ordering the state to pay defence costs.

The Court of Appeal's reasoning matters for every future case: it held that once Finnish authorities contacted the Eagle S and ordered it to raise anchor, the situation 'stopped being a maritime incident' under UNCLOS accident protections, because the vessel then dragged its anchor for a further three-plus hours and cut four more cables. That distinction - ordinary accident versus a continuing act after warning - is now expected to shape the parallel Fitburg trial, which opened 8 September 2026 with an almost identical jurisdictional dispute over Estonian versus Finnish waters.

Telecom-cable repairs are far faster and cheaper than power-cable repairs. Cinia's C-Lion1 fault (25 Dec 2024) was fixed in about 12 days once the repair ship Cable Vigilance reached the site from France. By contrast, Estlink 2's HVDC power cable needed a specially adapted vessel, Deep Cygnus, and months of preparatory work before offshore repair could even begin.

• Fibre-optic telecom cable repair: commonly cited at $500,000-$3 million per incident (estimates vary by source; see contradiction below)
• Power-cable repair: $10-100 million per incident, or up to GBP100 million including service-disruption costs in severe cases
• Global repair-fleet renewal need: roughly $3 billion by 2040 to replace 15 ageing ships and add up to 5 more

Roughly 200 subsea cable faults occur worldwide each year on average, and about 86% trace to fishing gear or ship anchors rather than sabotage - in 2023 alone there were 206 repairs across 136 jurisdictions, one of which took 947 days to complete. Baltic sabotage incidents are a small but highly visible fraction of a much larger, mostly accidental, global fault rate handled by an industry body (the ICPC) whose 258 members span 73 countries and roughly 98% of the world's subsea telecom cables.

Vessel owners typically carry Protection & Indemnity (P&I) club insurance to cover third-party liability for cable damage, and can invoke the international Convention on Limitation of Liability for Maritime Claims to cap their exposure based on the vessel's gross tonnage. For a small, low-value shadow-fleet vessel that severs tens of millions of euros of cable and grid infrastructure, that cap can fall far short of the actual damage.

Rather than pursue costly vessel attachment - estimated at hundreds of thousands of euros per month plus a EUR1 million deposit - Fingrid and Elering chose to sue the Eagle S's owners directly for roughly EUR105 million, covering repair costs and lost income. Their own lawyers estimated the civil trial could take five to six years to resolve.

NATO launched the standing 'Baltic Sentry' mission on 14 January 2025, deploying frigates, maritime patrol aircraft and naval drones, and integrating national surveillance under a Critical Undersea Infrastructure Network. It built on Commander Task Force Baltic, a roughly 90-officer round-the-clock monitoring command based in Rostock since October 2024, and the Joint Expeditionary Force's AI-driven 'Nordic Warden' vessel-risk system.

The European Commission adopted its EU Action Plan on Cable Security on 21 February 2025, organized around prevention, detection, response/recovery and deterrence. It has since delivered a coordinated risk assessment (October 2025), a separate EUR20 million tranche for AI-monitored regional 'cable hubs' and Cyber Solidarity Act preparedness work (also October 2025), a Cable Security Toolbox and a list of 13 'Cable Projects of European Interest' (5 February 2026), and a EUR347 million funding package (11 February 2026) split across repair equipment, monitoring tools, priority cable projects, and an accelerated-repair Baltic pilot.

National legislation has moved in parallel. Finland's Act on the Protection of Infrastructure Critical to Society took effect 1 July 2025, covering eleven critical sectors. Estonia proposed extending its Penal Code extraterritorially - prosecuting damage to Estonia-serving infrastructure wherever it occurs, raising prison terms to 10 years and corporate fines to about EUR60 million - and separately debated letting its Defence Forces use force, including sinking as a last resort, against non-compliant vessels.

On 16 May 2025, ten Baltic Sea NATO members plus the EU signed a Memorandum of Understanding on protecting critical undersea infrastructure at a Council of the Baltic Sea States meeting in Vihula, Estonia - covering situational-awareness sharing, joint experience-sharing, and coordination with NATO and the EU.

Deterrence claims should be read cautiously and with dates attached. In late November 2025, the Atlantic Council reported no suspicious Baltic incidents since Baltic Sentry began - a genuinely positive sign at the time. Five weeks later, the Fitburg incident (31 December 2025) and then the BCS East cable damage (2 January 2026) showed that deterrence, if real, was partial rather than complete.

• What will the Helsinki District Court decide in the Fitburg trial (opened 8 Sep 2026), and will it resolve the Estonia-vs-Finland jurisdiction question that also underlies the Eagle S case?
• Will Finland's Supreme Court grant leave to hear an Eagle S appeal before the 26 October 2026 deadline, and if so, how might that reshape the jurisdictional precedent?
• What caused the BCS East cable damage on 2 January 2026 - is a vessel implicated, and will Latvian or Swedish authorities reach a public conclusion?
• Will the EUR105 million Fingrid/Elering damages claim against Eagle S's owners ever be collectible, given the vessel's opaque ownership and Cook Islands flag?
• Has NATO's Baltic Sentry meaningfully reduced the rate of new incidents once a longer post-2025 track record is available, or do the Dec 2025/Jan 2026 incidents show deterrence was temporary?

This bundle is a sample research run, not an exhaustive 'extreme research' pass. Cost figures in particular vary widely across sources and are recorded here as ranges or explicit disagreements rather than single resolved numbers; several dates (the Eagle S appeal ruling date, the Estlink 2 return-to-service date) are reported inconsistently across otherwise-credible sources; even the basic incident count varies (one source counts nine severed Baltic cables through December 2024, another's running catalogue implies eleven or more once early-2026 incidents are included). See RESEARCH_NOTES.md and run_meta.notes for a full list of items the owner should re-verify before publishing.