The company has also reported drones and suspicious activity near its sites, prompting investigations
Nordic utility Fortum faces daily cyberattacks on its infrastructure in Finland and Sweden, according to CEO Markus Rauramo. The company has also observed drones and suspicious individuals near its sites. Authorities have been alerted to investigate these incidents.
Security services in both countries have seen a rise in malicious activities, especially since Finland and Sweden joined NATO after Russia’s invasion of Ukraine in 2022. Finland's Security and Intelligence Service (Supo) called Russia the main threat to Finland’s national security. A spokesperson for Sweden’s intelligence service (Sapo) echoed these concerns, noting a surge in security-threatening activities attributed to Russian intelligence.
Rauramo stated that cyberattacks are frequent, along with other suspicious activities. Fortum’s power plants experienced disruptions to satellite connections earlier this year. The incidents have occurred at both Finnish and Swedish facilities. Despite the increase, the impact on Fortum’s operations remains minimal due to enhanced security measures.
Fortum operates a diverse range of power plants, including hydro, wind, solar, nuclear, and combined heat and power (CHP) plants. The company has implemented extensive precautions to counter cyber threats. These include strict access controls, private security services, reserve systems, and collaborative drills with local authorities. Fortum’s head of security, Jari Stenius, noted that the number of incidents is rising, but the company’s preparations have helped mitigate their effects.
The Finnish National Bureau of Investigation (KRP) confirmed ongoing investigations into incidents near critical infrastructure but did not disclose details. Supo and Finnish police declined to comment on the specific nature of the cyberattacks or identify the perpetrators. Sweden’s Sapo also refrained from discussing specific incidents but highlighted a shift towards more aggressive and opportunistic actions from Russian intelligence.
Russia’s relations with Finland and Sweden have deteriorated significantly since 2022. This has led to an increase in cyberattacks and intelligence operations targeting critical infrastructure in both countries. Supo stated that Russia remains the main national security threat to Finland. Russian officials did not respond to requests for comment.
Tensions escalated further last year when Russia seized Fortum’s energy assets worth $1.9 billion in retaliation for European Union sanctions. Russia has repeatedly threatened to retaliate against Finland for its NATO membership.
NATO and Western intelligence agencies have warned about Russia’s growing number of hostile activities across Europe. These range from cyberattacks to acts of sabotage and espionage. In response, both Finland and Sweden have ramped up their security measures and increased cooperation with NATO allies.
The surge in cyber incidents underscores the growing geopolitical tensions in the region. Fortum’s case is emblematic of the broader challenges faced by Nordic countries in securing critical infrastructure against an increasingly aggressive Russia. As Finland and Sweden deepen their integration with NATO, further escalation in cyberattacks and other hostile activities is expected.
With security at the forefront, Fortum and other companies in the region continue to bolster defenses against a backdrop of mounting geopolitical instability.