NATO Foils Russian Subsea Cable Sabotage Operation

Russia tested a new way to threaten Europe’s critical infrastructure

A covert Russian operation in Arctic waters has exposed a new dimension of the security risks facing NATO. This spring, British, Norwegian and US forces tracked Russian submersibles near the Svalbard archipelago as they simulated the deployment of a new system designed to disable critical undersea cables. The vessels were linked to GUGI, Russia’s Main Directorate of Deep-Sea Research, a secretive unit responsible for operations beneath the seabed.

The operation did not result in damage to the cables. Instead, Western officials described it as a rehearsal for a potential conflict with NATO, with Russian vessels testing both the technology and the ability to operate undetected in one of Europe’s most strategically sensitive maritime areas. The allied response prevented the Russian vessels from completing the exercise and demonstrated that their movements were being monitored.

The significance extends beyond the Arctic. Undersea cables carry the bulk of international internet traffic and support financial transactions, satellite communications and other critical services. Their physical vulnerability is particularly difficult to address: cables can be only a few centimetres thick, lie thousands of metres below the surface and stretch across vast areas where continuous surveillance is difficult.

Svalbard sits on a strategic communications link

Two fibre-optic cables connect Svalbard with mainland Norway, running as deep as 2,700 metres below the sea. They carry large volumes of data from SvalSat, the satellite ground station on Svalbard and one of the world's most important facilities for downloading satellite data.

The location also gives the episode a wider military significance. The waters between Svalbard and mainland Norway form part of the northern maritime approaches through which Russian naval forces based on the Kola Peninsula can move towards the Atlantic. Norway is therefore strengthening its position in the High North, while Britain and the United States are increasing their involvement in regional surveillance and exercises.

In August, British, Norwegian and US forces conducted an exercise around Jan Mayen, a remote Norwegian island between Greenland and mainland Norway. Norway is also planning a new fibre-optic connection between Svalbard and Jan Mayen, with completion expected by 2028. The expansion reflects a broader effort to make critical infrastructure more resilient while increasing the ability to detect suspicious activity around it.

Europe is moving from protection to active surveillance

The Arctic operation is part of a wider shift in how European governments approach subsea security. Since the destruction of the Nord Stream pipelines in 2022, European states have become increasingly concerned that cables, pipelines and electricity links could be targeted without triggering the kind of immediate military response associated with conventional attacks.

NATO launched Baltic Sentry in January 2025 to strengthen surveillance of critical infrastructure in the Baltic Sea. The initiative combines frigates, maritime patrol aircraft and naval drones with national monitoring systems and greater cooperation with the private sector. The EU has also increased its focus on seabed infrastructure, including through measures designed to improve monitoring and resilience.

The challenge is not limited to direct attacks. European security officials have observed an increase in vessels slowly moving over or close to sensitive infrastructure, behaviour that can help map the location of cables and pipelines. Such activity is not necessarily illegal in international waters, but its scale has raised concerns that surveillance could be laying the groundwork for future disruption.

A test of NATO’s response to grey-zone attacks

The Arctic episode also illustrates the difficulty of responding to Russian actions that remain below the threshold of open military confrontation. A cable can be damaged without a missile being fired, while attribution can take time and the economic consequences can extend far beyond the location of an incident.

That creates a strategic space in which Russia can test European reactions without immediately triggering a conventional military response. Recent allegations of Russian sabotage activity in Romania, airspace violations in Eastern Europe and increased concern over Russian intelligence operations have reinforced the perception among European officials that Moscow is expanding its use of hybrid pressure.

For NATO, the priority is increasingly to make critical infrastructure difficult to map, penetrate or disable in the first place. The confrontation near Svalbard suggests that this effort is already moving beyond static protection: allied forces are monitoring Russian underwater activity, coordinating across national boundaries and signalling that attempts to prepare attacks on critical infrastructure are likely to be detected before they can be carried out.