Skip to content
Cyber Incident Disrupts Fehmarn Belt Tunnel Construction

Cyber Incident Disrupts Fehmarn Belt Tunnel Construction

First seen 14 Oct 2026, 15:31 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 17:35 UTC
  • •A cyber incident disrupted construction of the Fehmarn Belt tunnel on October 13, 2026.
  • •Central systems at Femern Link Contractors were disabled, affecting project timelines.
  • •No details on the attack vector, responsible parties, or potential data theft have been confirmed.

On October 13, 2026, a cyber incident affected Femern Link Contractors (FLC), the main contractor for the Fehmarn Belt tunnel project linking Denmark and Germany. The incident reportedly disabled central systems, significantly disrupting construction activities. Femern, the project owner, confirmed the incident and stated they are in dialogue with FLC but have not disclosed specific details about the affected systems or the scope of the disruption. Local media reports indicate that the incident has impacted work on this multibillion-kroner infrastructure project. There has been no confirmation of ransomware involvement, data theft, or attribution to any threat actor. The tunnel, once completed, is expected to reduce travel time between the two countries to seven minutes by train and ten minutes by car. Construction began in 2020 on the Danish side and in 2021 on the German side.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-13
Cyber incident confirmed at FLC
Femern Link Contractors reported a cyber incident that disabled central systems, impacting construction significantly.
X
2026-10-14
Sund & Baelt acknowledges disruption
Sund & Baelt confirmed ongoing dialogue with FLC regarding the cyber incident but provided no further details.
Aa.Tr

More articles in this cluster (4)

Following this threat?

Track Femern Link Contractors in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What systems were affected?
The specific systems affected by the cyber incident have not been disclosed by Femern or FLC.
Is there evidence of data theft?
There is currently no confirmation of data theft or involvement of ransomware in this incident.
What is the current status of construction?
Construction is significantly disrupted, but specific delays or timelines for recovery have not been provided.