Finland probes attempted break-ins at water treatment plants amid rising security concerns

Police in Finland are investigating several attempted break-ins at water treatment plants across the country. The locations targeted include Sipoo, Porvoo, Kangasala, and Tampere, which experienced two attempts. Currently, there is no information about potential suspects or whether the incidents are related.

While no evidence has been found to suggest Russia’s involvement, experts have stated that it cannot be ruled out. If successful, these break-ins could potentially contaminate drinking water, leading to illness among consumers, according to Anna Mikola, an assistant professor of water supply technology at Aalto University. However, she confirmed that no such instances have been reported to date.

Mikola stated that water quality in Finland is closely monitored, with routine automatic measurements and daily supervision. She cited cases of accidental water contamination, such as a boil-water advisory issued in parts of Kemi in December 2023 and a larger water crisis in Nokia in 2007 that caused illness among thousands of people.

Mikola also highlighted the increased security risks associated with water supply systems in light of Russia’s invasion of Ukraine. She noted that the water sector has been aware of these risks for several years, and considerable efforts have been undertaken to address them. Despite these efforts, she believes that the security and monitoring of water treatment plants in Finland could still be improved, even though this would increase costs.

The break-ins being investigated in Finland are primarily physical intrusions into water supply facilities like water towers. However, there have also been international instances of cyberattacks on water treatment plants, with suspected ties to Russia’s military intelligence service, the GRU.

These cyberattacks have occurred in Texas, USA, as well as France and Poland. A hacker group known as the Cyber Army of Russia or Cyber Army of Russia Reborn has claimed responsibility for these attacks. The group is believed to be connected to the Sandworm group, another name for Unit 74455 of Russia’s GRU.

According to a report released by the South Savo Centre for Economic Development, Transport and the Environment, which oversees national water supply monitoring in Finland, some Finnish water treatment plants have had security deficiencies.

Mikola stated that cybersecurity has also been considered in the water sector, and while some water treatment plants may need to improve their cybersecurity measures, no known cyberattacks on water treatment plants have occurred in Finland thus far.