On Christmas Day 2024, Finnish special forces stormed the oil tanker Eagle S in the icy waters 50 miles off Finland’s coast. The dramatic helicopter boarding, the first such seizure by Finland since World War II, sent shockwaves through the Baltic region and drew immediate attention from NATO. As crew members stood motionless, Finnish soldiers secured the vessel, marking a turning point in the escalating struggle to protect Europe’s undersea lifelines.
Sabotage Beneath the Surface
Over the previous 15 months, at least 11 undersea cables and pipelines in the Baltic Sea were damaged in a series of incidents authorities increasingly suspect were deliberate acts of sabotage. Investigations have repeatedly pointed to commercial vessels with links to Russia, raising fears about the vulnerability of critical infrastructure in a region where NATO and Russian interests collide. The 2022 Nord Stream pipeline explosions had already exposed the Baltic’s strategic fragility, but the recent wave of attacks—often involving so-called “shadow fleet” ships—has intensified the contest for control of these vital waters.
The Baltic Sea, ringed by NATO members and Russia, has become a flashpoint for hybrid warfare. Russia’s exclusion from NATO and its dependence on Baltic access have only heightened tensions. The region’s dense network of energy and data cables, essential for Northern Europe’s power and communications, now faces unprecedented threats.
A New Security Response
Finland and Sweden’s accession to NATO in 2023 and 2024 prompted the alliance to bolster its presence in the Baltic. As sabotage incidents mounted, NATO launched Operation Baltic Sentry on January 13, 2025. The operation deployed frigates, minehunters, maritime patrol aircraft, and surveillance drones to monitor and protect undersea infrastructure. While individual member states retain the authority to board and inspect suspicious vessels within their waters, Baltic Sentry’s primary focus is on coordinated surveillance and deterrence.
Since the operation began, no further sabotage has been reported—a sign, officials say, of its early effectiveness. “We are not in the war, but we are under attack,” Finnish Prime Minister Petteri Orpo said after the Eagle S seizure, capturing the region’s sense of vulnerability. For many Finns, the incident revived memories of past conflicts and underscored the stakes of modern, covert warfare.
Economic and Social Fallout
The sabotage of the EstLink-2 power cable and other lines left Estonia and Finland grappling with electricity and data outages. The Eagle S incident alone caused an estimated $70 million in damage to five cables. Direct repair costs across all 11 incidents have exceeded $200 million, with the broader economic impact—including emergency responses, heightened security measures, energy market volatility, electricity disruptions, and ongoing operational costs for naval patrols and surveillance—estimated by security analysts to reach several hundred million dollars when accounting for cumulative losses over the 15-month period.
Estonia’s government has warned that repeated attacks could jeopardize national energy security. Local businesses and residents have faced disruptions, and repair crews have raced to restore vital services. The repeated infrastructure attacks have created rippling effects throughout regional economies, affecting supply chains, insurance costs, and investor confidence in critical infrastructure security.
Tracking the Shadow Fleet
Central to NATO’s efforts is the challenge of monitoring Russia’s “shadow fleet”—commercial vessels with opaque ownership, often tied to sanctioned Russian oil interests. These ships have been accused of dragging anchors across the seabed to damage cables while evading detection and sanctions enforcement. Finnish investigators found that the Eagle S dragged its anchor for more than six hours, covering 66 miles before the anchor snapped off and was later recovered.
To counter these tactics, NATO has integrated advanced technologies into Baltic Sentry. Naval drones, satellite networks, and AI-powered surveillance tools now provide real-time monitoring of maritime traffic, aiming to detect suspicious activity before sabotage occurs. Maritime security experts note that while the scale of the Baltic’s undersea network makes total protection impossible, these new tools are closing gaps that adversaries have exploited.
Global Stakes and the Road Ahead
The repeated sabotage in the Baltic has exposed the vulnerability of Europe’s interconnected infrastructure, with each attack disrupting energy, data, and communications flows for millions. The pattern suggests a deliberate campaign to undermine regional stability—a concern echoed by NATO and national leaders, who have responded with new command structures and joint task forces.
Germany’s Commander Task Force Baltic now coordinates regional naval activities, while NATO’s Allied Maritime Command oversees multi-domain operations. The alliance is also investing in autonomous systems, enhanced information sharing, and multinational exercises to build resilience. Regional navies are upgrading fleets and training for rapid response.
Yet, as Operation Baltic Sentry continues, experts warn that determined adversaries may adapt their tactics, requiring constant vigilance and innovation. The question facing the region is whether new technologies and alliances can outpace the evolving threat. The answer will shape not only the security of the Baltic but also the resilience of Europe’s critical infrastructure for years to come.