Cybersecurity Threats Faced by Fortum

By Anne Kauranen and Essi Lehto
HELSINKI (Reuters) – Nordic utility Fortum is experiencing daily cyberattacks in Finland and Sweden. The CEO, Markus Rauramo, highlighted the presence of drones and suspicious individuals near their sites and stated that authorities have been asked to investigate these incidents.

Security services in both countries did not provide specific comments but noted an increase in malicious activities attributed to Russia in recent years. Russia's foreign ministry has not responded to requests for comment.

The decision by Finland and Sweden to join NATO, following Russia's invasion of Ukraine in 2022, has aggravated tensions with Russia.

Rauramo reported that Fortum is subjected to various cyberattack attempts daily, with drones appearing less frequently. Earlier this year, satellite connections to power plants were interrupted. Fortum operates in hydro, wind, solar, nuclear, and combined heat and power (CHP) sectors, with similar security concerns in Sweden as well.

To counter these threats, Fortum has implemented stringent security measures, including access controls, private security, reserve systems, and collaborative drills with authorities. Jari Stenius, head of security, noted that while incidents are increasing, their operational impact remains minimal.

Finland's National Bureau of Investigation confirmed ongoing investigations into incidents near critical infrastructure but did not provide further details. Intelligence services in both countries refrained from commenting on the cyberattacks or potential perpetrators.

Focusing on the Russian threat, Supo, Finland's Security and Intelligence Service, indicated that relations have deteriorated since 2022, leading to a surge in cyberattacks targeting critical infrastructure. Sweden's Sapo intelligence service echoed this, citing more aggressive and opportunistic Russian intelligence activities.

NATO and Western intelligence agencies have warned of rising hostile actions from Russia, which includes cyberattacks and other aggressive activities, while denying the allegations.

Russia has threatened Finland with retaliation for NATO membership and seized Fortum's Russian assets worth $1.9 billion following EU sanctions.