In an assessment published on December 18, 2025, the Danish Defence Intelligence Service (DDIS / FE) stated that Russia was responsible for a destructive cyberattack against a Danish water utility in 2024 [1]. The agency assessed that the pro-Russian group Z-Pentest, which carried out the attack, has links to the Russian state [1]. Officials explained that such operations form part of hybrid threats against the West aimed in part at creating a sense of insecurity [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Dec 18, 2025 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Danish Defence Intelligence Service Assesses Russia Was Behind 2024 Destructive Cyberattack on Danish Water Utility
1 min read
- Disclosed
- Dec 18, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Energy
What to do nowOur advice
Officials explained that such operations form part of hybrid threats against the West aimed in part at creating a sense of insecurity [1].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
The public DDIS assessment highlighted the 2024 destructive cyberattack on a Danish water utility and linked Z-Pentest to the Russian state. The headline assessment did not name the specific water utility; affected counts and technical details are subject to the original PDF report [1].
Source excerpt: "The Danish Defence Intelligence Service (DDIS) assesses that Russia was behind a destructive cyber-attack on a Danish water utility in 2024 and a series of attacks on Danish websites in the run-up to the 2025 municipal and regional council elections." [1].
References
Media1
- [1]
“The Danish Defence Intelligence Service (DDIS) assesses that Russia was behind a destructive cyber-attack on a Danish water utility in 2024 and a series of DDoS attacks on Danish websites in the run-up to the 2025 municipal and regional council elections.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.