The Cyber Threat Against the Danish Energy Sector

Like the general threat to Denmark, the cyber threat to the energy sector has been severe since the Centre for Cyber Security (CFCS) published the first threat assessment for the sector in 2018. Since then, the threat landscape has evolved and has only become more complex. The energy sector must defend itself against state actors, cybercriminal groups, and activists who, with varying intentions, target Western energy companies.

The threat from both cyber espionage and cybercrime against the energy sector remains VERY HIGH. Both states and criminal groups have an interest in compromising companies within the sector.

The tense situation between Russia and the West following Russia’s invasion of Ukraine in February 2022 has led cyber activists to increase their level of activity. The high level of activity, particularly among pro-Russian cyber activists, means that the current threat level for cyber activism is HIGH.

The war in Ukraine has fuelled fears of destructive cyberattacks. However, the CFCS assesses that the threat of a destructive cyberattack targeting the Danish energy sector remains LOW. Although several states, including Russia, possess the necessary capabilities to carry out such attacks, it remains less likely that they have the intention to do so.

The Cyber Threat Against the Danish Energy Sector (pdf)