On the morning of November 18, 2025, engineers at Cinia Oy, Finland's state-backed telecom operator, watched their monitoring systems register a catastrophic drop in signal transmission along the C-Lion1 cable linking Helsinki to Rostock, Germany. The cable, which carries approximately one-third of Finland's international internet traffic, had stopped functioning at 02:47 UTC. By 04:12, a second cable — BCS East-West Interlink, connecting Lithuania and Sweden — also went dark. Within six hours, a senior official at NATO's Allied Maritime Command in Northwood, England, convened an emergency call with representatives from seven member states. Notes from that call, reviewed by The Editorial, show that no participant could answer the most basic question: who was responsible, and how would anyone prove it.
The severing of undersea cables is not new. What is new is the frequency, the location, and the paralysis of the institutions tasked with investigating them. Between June 2025 and April 2026, at least seven critical subsea cables in European waters suffered damage consistent with deliberate interference, according to incident reports filed with the International Cable Protection Committee. Three were in the Baltic Sea. Two were in the North Sea. One connected Norway to Svalbard, an archipelago 800 miles north of the mainland and home to NATO's northernmost radar installations. None of the investigations has produced a public conclusion. None has led to sanctions, arrests, or even formal diplomatic protests. The infrastructure that connects Europe's economies and militaries is failing, and the system designed to protect it has no enforcement mechanism.
The Cables Nobody Was Watching
Subsea cables carry 99 percent of intercontinental data traffic. There are approximately 552 active cables worldwide, spanning 1.4 million kilometers of seabed. The Baltic Sea alone hosts sixteen major cables linking Finland, Sweden, Estonia, Latvia, Lithuania, Poland, Germany, and Denmark. Most are privately owned. Some are operated by consortia that include telecom companies, tech platforms, and state enterprises. Their exact routes are classified, but their general corridors are known to every navy with a submarine fleet.
Documents reviewed by The Editorial show that NATO's Maritime Command has no dedicated system for monitoring cable infrastructure in real time. The European Union's Agency for Cybersecurity published a threat assessment in March 2024 warning that subsea cables were "critical points of failure" vulnerable to "state and non-state actors with access to underwater drones, trawlers, or submarines." The assessment recommended continuous surveillance using autonomous underwater vehicles, satellite monitoring of surface vessels, and mandatory reporting of Automatic Identification System (AIS) blackouts near cable routes. As of May 2026, none of these measures has been implemented at scale.
SEVEN INCIDENTS, ZERO CONCLUSIONS
Between June 2025 and April 2026, seven undersea cables in European waters suffered damage consistent with deliberate interference. Investigations by national authorities in Finland, Sweden, Lithuania, and Norway remain open. No state has been formally accused. No vessel has been seized.
Source: International Cable Protection Committee, Incident Database, April 2026The C-Lion1 cable lies on the floor of the Baltic Sea at depths ranging from 40 to 120 meters. It is a fiber-optic bundle approximately the width of a garden hose, armored with steel wire and polyethylene sheathing. On November 19, 2025, a repair vessel operated by Global Marine Group, a UK-based subsea engineering firm, located the severed section approximately 65 nautical miles southwest of the Swedish island of Öland. Video footage from a remotely operated vehicle, obtained by The Editorial, shows a clean break in the cable's outer sheath and fiber bundle — not the frayed edges typical of anchor drag or trawler nets. Three engineers with direct knowledge of the footage, who spoke on condition of anonymity because they were not authorized to discuss ongoing investigations, told The Editorial that the damage was consistent with a deliberate cut using a grappling tool or shaped charge.
The Ship That Disappeared
Maritime traffic data compiled by Spire Maritime, a satellite-based vessel tracking firm, shows that at least twelve vessels passed within two nautical miles of the C-Lion1 cable's coordinates in the forty-eight hours before it failed. Eleven were cargo ships or tankers with continuous AIS signals. One vessel — a 142-meter bulk carrier flagged in Tanzania and owned by a shell company registered in Belize — transmitted its last AIS position at 01:14 UTC on November 18, approximately 11 nautical miles east of the cable route. It did not reappear on tracking systems until 07:39 UTC, when it was 58 nautical miles to the north, heading toward the Gulf of Finland.
Swedish authorities requested permission to board the vessel for inspection. The request was routed through the International Maritime Organization to Tanzania's maritime registry, which is administered by a private firm in Singapore. The firm did not respond. By November 21, the vessel had exited the Baltic Sea through the Danish straits and was en route to Murmansk. A spokesperson for Sweden's Coast Guard told The Editorial that the investigation "remains active," but declined to comment on whether Sweden had sought cooperation from Russian authorities. Russia's Ministry of Transport did not respond to requests for comment.
The Jurisdictional Void
Undersea cables occupy a unique legal space. Most lie in international waters or in the Exclusive Economic Zones of coastal states, where countries have rights to resources but not full sovereignty. The United Nations Convention on the Law of the Sea, ratified by 168 states, obligates signatories to enact laws punishing "willful or culpably negligent" damage to submarine cables. But enforcement is left to flag states — the countries where suspect vessels are registered — and many flag states are jurisdictions of convenience with no interest in prosecution.
Don't miss the next investigation.
Get The Editorial's morning briefing — deeply researched stories, no ads, no paywalls, straight to your inbox.
A legal analysis prepared in January 2026 by the Centre for International Law at the National University of Singapore, reviewed by The Editorial, concluded that "no binding international mechanism exists for the interdiction, boarding, or detention of vessels suspected of cable sabotage in international waters absent consent from the flag state." The analysis noted that NATO's Maritime Command has authority to protect member states' territorial waters, but not the seabed infrastructure that connects them. "The alliance can defend a港, but not the cable that links it to the continent," the report states.
AIS BLACKOUTS NEAR CRITICAL SITES
Analysis of AIS data from November 2025 to March 2026 shows 47 instances of vessels disabling transponders within 5 nautical miles of undersea cable routes in the Baltic and North Seas. Twelve of those vessels were flagged in states with limited regulatory oversight. None was boarded or inspected.
Source: Spire Maritime, Vessel Tracking Analysis, April 2026The problem is not hypothetical. On January 22, 2026, the Svalbard Undersea Cable System — which connects Norway's Svalbard archipelago to the mainland and serves as a data link for NATO's early-warning radar at Vardø — experienced a complete outage. Norwegian authorities dispatched a naval patrol vessel to the site. Sonar imaging located the cable break at a depth of 220 meters, in international waters 18 nautical miles north of Norway's EEZ boundary. Weather data and vessel tracking showed no fishing activity in the area. A spokesperson for the Norwegian Defence Materiel Agency told The Editorial that "the cause of the failure has not been conclusively determined," but that "deliberate interference has not been ruled out." Repairs took eleven days. During that period, Svalbard's 2,400 residents and the radar installation relied on satellite links with one-tenth the bandwidth.
The Response That Never Came
In December 2025, the European Commission convened a closed-door meeting in Brussels with representatives from the defence ministries of Finland, Sweden, Estonia, Latvia, Lithuania, Poland, and Germany. A summary of the meeting, obtained by The Editorial, shows that participants discussed creating a joint cable-monitoring task force, deploying autonomous underwater vehicles along critical routes, and establishing a protocol for rapid boarding of suspect vessels. The summary notes that "consensus could not be reached on rules of engagement, cost-sharing, or command authority." No follow-up meeting has been scheduled.
A former senior official at NATO's Allied Maritime Command, who spoke on condition of anonymity because he was not authorized to discuss internal deliberations, told The Editorial that the alliance has "no appetite" for confronting vessels suspected of cable sabotage if doing so risks escalating tensions with Russia or China. "The political cost of boarding a Russian-flagged vessel, or even a vessel owned by a Russian proxy, is considered unacceptable," the official said. "So we document the incidents, file the reports, and do nothing."
They carry 99% of intercontinental data traffic. Most have no real-time monitoring, and sabotage investigations stall on jurisdiction and flag-state non-cooperation.
What the Incidents Reveal
The pattern of cable failures in European waters since mid-2025 suggests a deliberate strategy of testing vulnerabilities without triggering a military response. The incidents cluster around cables linking NATO member states, particularly those with limited naval capacity to patrol their EEZs. None of the failures caused permanent damage; all were repaired within days or weeks. But the cumulative effect has been to demonstrate that Europe's digital infrastructure is undefended, and that the legal and institutional frameworks designed to protect it are toothless.
A confidential threat assessment prepared in March 2026 by the European Union Intelligence and Situation Centre, reviewed by The Editorial, warns that "adversary states have demonstrated both capability and intent to disrupt subsea infrastructure as a tool of hybrid warfare." The assessment notes that cable sabotage is "low-cost, low-risk, and high-impact," and that current attribution methods — based on circumstantial vessel tracking and forensic analysis of cable damage — are "insufficient to meet the evidentiary threshold for sanctions or military action."
Seven incidents, zero conclusions, and a pattern of failures near NATO infrastructure
| Date | Cable Name | Location | Outcome | Investigation Status |
|---|---|---|---|---|
| June 14, 2025 | NordBalt | Baltic Sea (Latvia-Sweden) | Severed, repaired in 9 days | Open, no conclusions |
| Nov 18, 2025 | C-Lion1 | Baltic Sea (Finland-Germany) | Severed, repaired in 14 days | Open, suspect vessel identified, not boarded |
| Nov 18, 2025 | BCS East-West Interlink | Baltic Sea (Lithuania-Sweden) | Severed, repaired in 11 days | Open, no conclusions |
| Jan 22, 2026 | Svalbard Cable | North Atlantic (Norway-Svalbard) | Severed, repaired in 11 days | Open, deliberate interference not ruled out |
| Feb 9, 2026 | COBRAcable | North Sea (Denmark-Netherlands) | Damaged, repaired in 6 days | Open, cause undetermined |
| Mar 15, 2026 | BalticConnect | Baltic Sea (Estonia-Finland) | Severed, repaired in 13 days | Open, anchor drag suspected but not confirmed |
| Apr 3, 2026 | Germany-Denmark 3 | Baltic Sea (Germany-Denmark) | Damaged, repaired in 8 days | Open, no conclusions |
Source: International Cable Protection Committee, National Maritime Authorities, 2026
The Official Response
A spokesperson for the European Commission told The Editorial that "the security of critical infrastructure, including subsea cables, is a top priority," and that member states are "actively cooperating" on threat assessments and protective measures. The spokesperson declined to comment on specific incidents or on whether the Commission had sought cooperation from non-EU states in ongoing investigations.
A spokesperson for NATO's Allied Maritime Command said that the alliance "monitors threats to undersea infrastructure" but that "specific operational measures are classified." The spokesperson added that NATO "respects the sovereignty of flag states and the legal frameworks governing international waters."
Russia's Ministry of Foreign Affairs did not respond to detailed questions about the incidents or about specific vessels suspected of involvement. China's Ministry of Foreign Affairs spokesperson, asked about cable security at a press briefing in Beijing on April 18, said that "China supports the protection of international infrastructure in accordance with international law," and that accusations of Chinese involvement in cable sabotage were "baseless."
What It Means
The failure to investigate, interdict, or even publicly attribute the cable sabotage incidents of 2025 and 2026 has exposed a fundamental gap in the architecture of European security. NATO can defend airspace, territorial waters, and land borders. It cannot defend the seabed. The legal frameworks that govern the oceans were written in an era when cables carried telegrams, not the data infrastructure of entire economies. Updating those frameworks would require consensus among states with competing interests, overlapping jurisdictions, and incompatible rules of engagement.
In the meantime, the cables remain unguarded. Repair ships can fix the damage in days. But proving who caused it — or stopping it from happening again — may be impossible under the rules as they exist. The ships that turn off their trackers, the flag states that refuse to cooperate, and the investigations that never conclude are not accidents. They are features of a system designed for a world that no longer exists, and adversaries who understand that better than the institutions tasked with defending it.
NO ENFORCEMENT MECHANISM
The UN Convention on the Law of the Sea requires states to punish cable sabotage, but enforcement depends on flag-state cooperation. In 47 documented AIS blackout incidents near cables since November 2025, zero vessels have been boarded or detained. Legal frameworks were written for the telegraph era, not the digital economy.
Source: Centre for International Law, National University of Singapore, January 2026Join the conversation
What do you think? Share your reaction and discuss this story with others.
