Power Grid

Tureby–Alkestrup waterworks — cyberattack bursts distribution pipes

December 2024; attribution disclosed 18 December 2025

Tureby, Køge Municipality, Denmark (approximate location)

What happened

Pro-Russian cyber actors manipulated operational controls at the small Tureby–Alkestrup drinking-water utility, changing network pressure and causing pipes to burst. Denmark's cyber-security authority reported that about 450 households briefly lost water because of low pressure and around 50 were without water for several hours after increased pressure ruptured a pipe. In December 2025, Denmark's Defence Intelligence Service attributed the destructive attack to Z-Pentest, assessed the group as linked to the Russian state, and described it as an instrument of Russia's hybrid campaign against Western countries supporting Ukraine. The marker is approximate.

Evidence
Documented
Confidence
High
Infrastructure
Power Grid
Latitude
55.3900°
Longitude
12.0700°

Attribution

Attributed to Z-Pentest, assessed by Danish intelligence as linked to the Russian state

Denmark's Defence Intelligence Service assessed that Russia used the pro-Russian group as an instrument of hybrid warfare. Russia did not acknowledge responsibility.

Sources

  1. Russia is responsible for destructive and disruptive cyber attacks against DenmarkDanish Defence Intelligence Service; Centre for Cyber Security · Incident reporting