--- title: Cyberattack halts construction of tunnel between Denmark... description: A cyberattack has halted construction of the Fehmarn Belt road-and-rail tunnel linking Denmark and Germany, disabling workers' identification badges and... canonical: https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cyberattack halts construction of tunnel between Denmark and Germany | daily.dev og:description: A cyberattack has halted construction of the Fehmarn Belt road-and-rail tunnel linking Denmark and Germany, disabling workers' identification badges and... og:url: https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs og:image: https://api.daily.dev/og/posts/jF7LCKdgs.png og:image:alt: Cyberattack halts construction of tunnel between Denmark and Germany og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cyberattack halts construction of tunnel between Denmark and Germany **[Hacker News](https://daily.dev/sources/hn)** · 2 min read · 0 upvotes · 0 comments ## Summary A cyberattack has halted construction of the Fehmarn Belt road-and-rail tunnel linking Denmark and Germany, disabling workers' identification badges and immobilizing vessels, cranes and platforms used for offshore work. The FLC consortium, which employs around 2,800 people across several European countries, had all construction activity stop as a result. Investor Sund & Baelt is in discussions with the contractor, and the attacker's identity remains unknown. Danish officials have floated a possible link to hybrid warfare amid recent warnings of Russian cyberattacks and a raised national threat level. The €7 billion, 18-kilometer tunnel, built from 89 concrete elements assembled at sea with digital software, was originally slated to open in 2029, though delays had already been anticipated. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What happened in the cyberattack on the Fehmarn Belt tunnel construction project? A cyberattack disabled workers' identification cards and immobilized vessels, cranes, and platforms used for offshore work, forcing a complete halt to construction on the Fehmarn Belt tunnel between Denmark and Germany. The FLC consortium, which employs about 2,800 people from Denmark, Germany, France, Belgium, and the Netherlands, was affected. The attacker's identity and the time needed to resolve the incident remain unknown. _Infrastructure and security teams follow incidents like this on daily.dev to understand real-world OT attack impacts._ ### Could the Fehmarn Belt tunnel cyberattack be linked to Russian hybrid warfare? Danish officials have not ruled out a connection to hybrid warfare. Henning Mortensen, head of the Danish Council for Digital Security, raised the possibility, noting that Danish services had recently warned of potential Russian cyberattacks and raised the national threat level to high in the weeks before the incident. _Security-minded engineers track geopolitical cyber threat developments like this through daily.dev._ ## Community take How the wider developer community reacted, aggregated from 1 discussion and 123 comments across hackernews (as of 2026-10-14). **TL;DR:** Discussion sprawls well beyond the tunnel incident into geopolitics, with heavy speculation about Russian hybrid warfare, skepticism about attribution, and broader alarm over critical infrastructure being needlessly internet-connected and insecure. **Sentiment:** 5% positive · 35% mixed · 60% skeptical **The pushback** - Many argue that connecting badges, cranes, and industrial equipment to the internet for convenience creates unnecessary attack surface that should simply be removed. - Several question the rush to blame Russia, suggesting attribution is unproven and politically convenient, with some floating false-flag theories. - Commenters note a pattern of similar attacks (supermarket fridges, Dutch retailer outage) suggesting systemic security negligence rather than sophisticated nation-state capability. - Some argue AI is lowering the barrier for attackers and will make this kind of disruption more frequent. **By community** - hackernews (heated): The thread fractures almost entirely into a heated geopolitical argument about the Russia-Ukraine war, UN impotence, and whether attribution to Russia is credible, with only a minority of comments discussing the actual tunnel attack or infrastructure security. **Hottest debate:** Whether cyberattacks like this should be attributed to Russian hybrid warfare or whether that narrative is overused/unproven, spiraling into a broader war-responsibility debate. **Open questions** - Who actually carried out the attack and what is the evidence for attribution? - What motive would Russia (or another actor) have for a disruption of this kind? - Are the fridge, retailer, and tunnel incidents actually connected? **Highlights** > Big picture, where this leads is a lot of physical stuff just getting unplugged from the Internet. It's very easy to see how this goes — one side of the ledger is the cost savings you get from remote monitoring, remote control, automated cloud backups of access logs from employee badges, or whatever dumb reason this system was internet-connected in the first place. On the other side of the ledger is the potential cost and probability of a shutdown from a cyberattack, whether that's from a belligerent state actor, a malfunctioning or maliciously deployed AI agent swarm, weird accelerationist hackers, or whatever, plus the cost of constantly defending and hardening systems against attack. Chances are, the cost/benefit analysis will heavily favor just unplugging the thing from the Internet. > — [mbgerring on hackernews · 1 comments](https://news.ycombinator.com/item?id=50077266) > Assuming the Russia speculation is correct, what is their motivation? General chaos in Europe? It seems pretty reckless knowing this would be ascribed to them, and I don't see how they benefit here. > — [jcomp on hackernews · 5 comments](https://news.ycombinator.com/item?id=50076695) > This is where my mind goes too. They're not even outright blaming Russia here either, just planting the seed by referring to intelligence assessments that are for some reason made public. I hesitate to use the term because of the connotations, but considering the ever-increasing ease by which such cyberattacks can be conducted and the actors' identity obscured, this and similar incidents seem ripe for some kind of a false flag type deal. Some non-zero number of these incidents have to be exactly that. This isn't to excuse Russia's abhorrent conduct elsewhere either, I'm just not entirely convinced by the boogeyman lazy journalists seem perfectly content to keep trotting out. > — [jcomp on hackernews](https://news.ycombinator.com/item?id=50077294) > > President of the Danish Council for Digital Security, Henning Mortensen, does not rule out that the incident may have to do with a hybrid war. In recent weeks, Danish services have warned of possible cyber attacks from Russia and raised the degree of threat to "high." https://www.rmf24.pl/fakty/swiat/news-wojna-hybrydowa-cybera... > — [avidruntime on hackernews · 1 comments](https://news.ycombinator.com/item?id=50075029) > “Once is happenstance. Twice is coincidence. Three times is enemy action.” > — [fodkodrasz on hackernews · 2 comments](https://news.ycombinator.com/item?id=50076664) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=50074289) · 122 points · 123 comments ## Similar posts on daily.dev - [UK and Germany team up against Russian cyberattacks as Brexit rethink looms](https://daily.dev/posts/uk-and-germany-team-up-against-russian-cyberattacks-as-brexit-rethink-looms-yx4ikhr1s) · The Register · 0 upvotes · 0 comments - [The internet has a Strait of Hormuz problem](https://daily.dev/posts/the-internet-has-a-strait-of-hormuz-problem-ncupqxxzl) · TechCentral · 0 upvotes · 0 comments - [The Download: record-breaking subsea tunnels and flexible data centers](https://daily.dev/posts/the-download-record-breaking-subsea-tunnels-and-flexible-data-centers-ajnchszjm) · MIT Technology Review · 0 upvotes · 0 comments - [Schneier on Security](https://daily.dev/posts/schneier-on-security-jqtqylcqc) · Schneier on Security · 0 upvotes · 0 comments - [Getlink warns unstable EU software could delay Channel Tunnel biometric borders](https://daily.dev/posts/getlink-warns-unstable-eu-software-could-delay-channel-tunnel-biometric-borders-jpgjrc3j0) · The Next Web · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cyberattack halts construction of tunnel between Denmark and Germany","url":"https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs"},"datePublished":"2026-10-13T18:23:52.686Z","dateModified":"2026-10-14T00:39:44.834Z","description":"A cyberattack has halted construction of the Fehmarn Belt road-and-rail tunnel linking Denmark and Germany, disabling workers' identification badges and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5640544fb26a9f93b9a9a4a11076e290?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/5640544fb26a9f93b9a9a4a11076e290?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Cyberattack halts construction of tunnel between Denmark and Germany"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cyberattack-halts-construction-of-tunnel-between-denmark-and-germany-jf7lckdgs#faq","mainEntity":[{"@type":"Question","name":"What happened in the cyberattack on the Fehmarn Belt tunnel construction project?","acceptedAnswer":{"@type":"Answer","text":"A cyberattack disabled workers' identification cards and immobilized vessels, cranes, and platforms used for offshore work, forcing a complete halt to construction on the Fehmarn Belt tunnel between Denmark and Germany. The FLC consortium, which employs about 2,800 people from Denmark, Germany, France, Belgium, and the Netherlands, was affected. The attacker's identity and the time needed to resolve the incident remain unknown. Infrastructure and security teams follow incidents like this on daily.dev to understand real-world OT attack impacts."}},{"@type":"Question","name":"Could the Fehmarn Belt tunnel cyberattack be linked to Russian hybrid warfare?","acceptedAnswer":{"@type":"Answer","text":"Danish officials have not ruled out a connection to hybrid warfare. Henning Mortensen, head of the Danish Council for Digital Security, raised the possibility, noting that Danish services had recently warned of potential Russian cyberattacks and raised the national threat level to high in the weeks before the incident. Security-minded engineers track geopolitical cyber threat developments like this through daily.dev."}}]} ```