Finnish police investigating break-ins at water utilities amid security concerns

Several attempts to break into Finnish water utilities are under investigation by the police. The break-in attempts have occurred in Sipoo, Porvoo, Kangasala, and twice in Tampere. No information is currently available about potential suspects or whether the incidents are connected.

Some experts have suggested that Russian involvement cannot be ruled out, although no evidence has been provided to support these claims. According to Anna Mikola, an associate professor of water supply technology at Aalto University, breaking into a water utility could theoretically contaminate drinking water, potentially causing illness. However, there is currently no evidence of such incidents.

Water quality in Finland is closely monitored. “There is a lot of water quality monitoring, automatic measurements, and people who monitor the situation daily,” says Mikola. Accidental contamination of drinking water has occurred in the past, for example, in the southern districts of Kemi where a boil water notice was issued for a few days in December 2023.

Mikola states that Russia’s war in Ukraine has highlighted the security risks associated with water supply. She notes that in Ukraine, Russia has deliberately targeted water supply facilities. The water supply sector in Finland has recognized these risks for several years and has taken steps to address them.

Mikola also believes that while water quality monitoring in Finland is already very rigorous, the protection and monitoring of water utilities could be further improved. “This will increase costs, but it may be necessary if risks increase,” she says.

The break-ins under investigation in Finland specifically involve physical spaces of water utilities, such as water towers. However, examples of cyberattacks on water utilities have been reported abroad, with the suspected attackers believed to be linked to Russia’s military intelligence service, the GRU. Cyberattacks on water utilities have occurred in Texas, USA, as well as in France and Poland. The targeted water utilities were relatively small.

According to a report published by the South Savo Centre for Economic Development, Transport and the Environment, which is responsible for national water supply monitoring in Finland, some Finnish water utilities have had deficiencies in their cybersecurity. Mikola agrees, stating that while cybersecurity has been considered in the water supply sector, there is still room for improvement in some utilities.