Cyberattacks: Fortum Faces Increasing Threats to Its Infrastructures in Finland and Sweden

Fortum, a major player in the Finnish energy sector, is confronting a surge of cyberattacks and suspicious surveillance activities around its facilities in Finland and Sweden, likely orchestrated by Russian actors, heightening geopolitical tensions in the region.

Share:

Gain full professional access to energynews.pro from 4.90€/month.
Designed for decision-makers, with no long-term commitment.

Over 30,000 articles published since 2021.
150 new market analyses every week to decode global energy trends.

Monthly Digital PRO PASS

Immediate Access
4.90€/month*

No commitment – cancel anytime, activation in 2 minutes.

*Special launch offer: 1st month at the indicated price, then 14.90 €/month, no long-term commitment.

Annual Digital PRO Pass

Full Annual Access
99€/year*

To access all of energynews.pro without any limits

*Introductory annual price for year one, automatically renewed at 149.00 €/year from the second year.

Fortum, one of the leading companies in the Finnish energy sector, is experiencing daily cyberattacks and surveillance activities on its critical infrastructures in Finland and Sweden. These incidents include attempts to disrupt satellite connections, unidentified drone flyovers, and physical surveillance of energy production sites. This intensification of malicious activities appears to be linked to the deteriorating relations with Russia, following Finland and Sweden’s decision to join NATO after the 2022 invasion of Ukraine.

According to Fortum’s data, its energy production facilities, including hydroelectric, wind, solar, and nuclear power plants, have seen a significant increase in the number of cyberattacks since the beginning of 2024. GlobalData reported that the first quarter of 2024 recorded the highest number of attacks targeting critical infrastructures in the past four years. This trend seems to be exacerbated by the increased integration of renewable energy sources, which has expanded the attack surface for hackers.

The growing complexity of these cyberattacks is accompanied by new vulnerabilities, particularly within the older management and control systems of the facilities. As a result, Fortum has decided to strengthen its security protocols by adopting advanced technologies and implementing regular system updates. These measures aim to address both existing vulnerabilities and emerging threats, ensuring the resilience of their energy infrastructure against sophisticated cyber threats.

Fortum’s Response to Cyber Threats

To mitigate these risks, Fortum has implemented enhanced security measures, such as stricter access controls, deployment of private security personnel, and conducting emergency simulation drills in collaboration with local authorities. These initiatives are designed to minimize operational disruptions and safeguard critical energy assets. Additionally, Fortum has invested in advanced cybersecurity technologies, including intrusion detection systems and real-time monitoring solutions, to proactively identify and neutralize potential threats.

Cooperation with national security agencies remains limited, as attributing these attacks to state actors, particularly Russians, remains a sensitive issue. Nevertheless, Fortum’s officials acknowledge that Russian involvement is strongly suspected based on intelligence assessments and the nature of the attacks. This collaboration, albeit constrained, is crucial for sharing threat intelligence and coordinating responses to mitigate the impact of cyber incidents.

Geopolitical Context

Finland and Sweden’s accession to NATO has been perceived by Russia as a direct threat to its national security. In response, Moscow has intensified its intelligence and cyber-espionage operations against its Nordic neighbors. This situation has become particularly tense since Russia seized Fortum’s energy assets in its territory, valued at approximately $1.9 billion, in retaliation to European sanctions imposed following the Ukraine conflict.

Finnish and Swedish intelligence agencies have warned that Russia may seek to test the resilience of their energy infrastructures while collecting strategic information. Unidentified drone flyovers and attempts to disrupt Fortum’s satellite communications illustrate these efforts to create uncertainty and exert pressure on energy sector players. These actions are part of a broader strategy to destabilize the region’s energy security and gain leverage in geopolitical negotiations.

Moreover, the increased cyber activities coincide with Russia’s broader strategy to undermine Western alliances and assert its influence in Europe. By targeting critical infrastructure, Russia aims to weaken the economic stability and security of NATO member states, thereby diminishing their capacity to coordinate effectively within the alliance.

Perspectives for Fortum and the Energy Sector

Despite the increase in threats, Fortum states that the impact on its operations remains limited, highlighting the effectiveness of its protective measures. The company’s ability to maintain operational continuity amidst persistent attacks underscores the importance of robust cybersecurity frameworks in the energy sector. However, the persistence of these attacks indicates a long-term strategy aimed at assessing system robustness, gathering sensitive intelligence, or potentially disrupting energy supply chains in the region.

Looking ahead, Fortum and other companies in the sector will need to further strengthen their investments in cybersecurity and collaborate more closely with intelligence agencies to protect their critical infrastructures. The security of energy assets, in an unstable geopolitical context, could become a priority issue for the European Union as tensions with Russia continue to escalate. Enhanced international cooperation and information sharing will be essential in developing comprehensive defense strategies to counteract the evolving threat landscape.

Additionally, the energy sector must anticipate and prepare for the integration of emerging technologies that could both enhance operational efficiencies and introduce new vulnerabilities. As renewable energy sources become more prevalent, the sector must balance the benefits of modernization with the imperative of maintaining stringent security standards to protect against increasingly sophisticated cyber threats.

Swedish renewable energy developer OX2 has appointed Matthias Taft as its new chief executive officer, succeeding Paul Stormoen, who led the company since 2011 and will now join the board of directors.
Driven by distributed solar and offshore wind, renewable energy investments rose 10% year-on-year despite falling financing for large-scale projects.
Australian Oilseeds Holdings was granted a deadline extension until 30 September to comply with the Nasdaq’s equity requirements, avoiding immediate delisting from the exchange.
Fermi America has closed $350mn in financing led by Macquarie to accelerate the development of its HyperGridâ„¢ energy campus, focused on artificial intelligence and high-performance data applications.
Soluna Holdings launched two energy projects in Texas, reaching one gigawatt of cumulative capacity for its data centres, marking a new stage in the development of computing infrastructure powered by renewable energy.
Eneco’s Supervisory Board has appointed Martijn Hagens as the next Chief Executive Officer. He will succeed interim CEO Kees Jan Rameau, effective from 1 March 2026.
With $28 billion in planned investments, hyperscaler expansion in Japan reshapes grid planning amid rising tensions between digital growth and infrastructure capacity.
The suspension of the Revolution Wind farm triggers a sharp decline in Ørsted’s stock, now trading at around 26 USD, increasing the financial stakes for the group amid a capital increase.
Hydro-Québec reports net income of C$2.3 billion in the first half of 2025, up more than 20%, driven by a harsh winter and an effective arbitrage strategy on external markets.
French group Air Liquide strengthens its presence in Asia with the acquisition of South Korean DIG Airgas, a key player in industrial gases, in a strategic €2.85 billion deal.
The Ministry of Economy has asked EDF to reconsider the majority sale agreement of its technology subsidiary Exaion to the American group Mara, amid concerns related to technological sovereignty.
IBM and NASA unveil an open-source model trained on high-resolution solar data to improve forecasting of solar phenomena that disrupt terrestrial and space-based technological infrastructures.
The Louisiana regulatory commission authorizes Entergy to launch major energy projects tied to Meta’s upcoming data center, with anticipated impacts across the regional power grid.
Westbridge Renewable Energy will implement a share consolidation on August 22, reducing the number of outstanding shares by four to optimize its financial market strategy.
T1 Energy secures a wafer supply contract, signs 437 MW in sales, and advances G2_Austin industrial deployment while maintaining EBITDA guidance despite second-quarter losses.
Masdar has allocated the entirety of its 2023–2024 green bond issuances to solar, wind, and storage energy projects, while expanding its financial framework to include green hydrogen and batteries.
Energiekontor launches a €15 million corporate bond at 5.5% over eight years, intended to finance wind and solar projects in Germany, the United Kingdom, France, and Portugal.
The 2025 EY study on 40 groups shows capex driven by mega-deals, oil reserves at 34.7 billion bbl, gas at 182 Tcf, and pre-tax profits declining amid moderate prices.
Australian fuel distributor Ampol reports a 23% drop in net profit, impacted by weak refining margins and operational disruptions, while surpassing market forecasts.
Puerto Rico customers experienced an average of 73 hours of power outages in 2024, a figure strongly influenced by hurricanes, according to the U.S. Energy Information Administration.

Log in to read this article

You'll also have access to a selection of our best content.