4.1.2 Offshore wind buildout as expanding attack surface
The Baltic offshore wind build-out is in the early stages of a roughly fivefold expansion to 2030 and a thirty-fold expansion to 2050, against an installed base of 2.8 GW as of 2024. The principal projects span the basin: the Bornholm Energy Island (3 GW, Denmark-Germany), the Kriegers Flak combined grid solution between Denmark and Germany, the Estonia-Latvia ELWIND project of approximately 1 GW, and a substantial Polish pipeline in the southern Baltic that includes the 1.2 GW Baltic Power project developed by Orlen and Northland Power, with generation expected from 2026, and the Equinor-Polenergia Baltyk II and III farms of 720 MW each, expected to reach full operation by 2028.
From an energy security perspective, the build-out has two contradictory implications. On the supply side, offshore wind in the Baltic operates with a capacity factor in the range of 45 to 55 per cent at the better sites, which gives it a firmer power-system role than onshore wind and closer to that of conventional baseload generation; the contribution of offshore wind to Nordic-Baltic adequacy through the 2030s is therefore substantial.
On the security side, the build-out compounds the cluster exposure that 4.1.1 identified. Every new offshore wind farm adds a network of inter-array cables, an offshore substation, and an export cable to the basin's stock of high-value subsea assets. The Bornholm and Kriegers Flak hybrid projects are particularly exposed because their export cables function simultaneously as cross-border interconnectors.
The 2023 NATO ENSEC Centre of Excellence Coherent Resilience tabletop exercise on a drone swarm attack against an offshore substation revealed coordination gaps across critical infrastructure protection, crisis management, strategic communication, and maritime law that have not been comprehensively addressed. The trade-off is not whether to proceed with the build-out, which is required for both the climate and security pillars of the Nordic energy trilemma, but how to protect what is being built. That challenge is treated in Section 8. 4.1.3 The Baltic offshore infrastructure disruption risk
Since September 2022, a series of incidents has damaged or severed subsea energy and telecommunications infrastructure in the Baltic, from pipelines and HVDC power cables to data cables, through methods including explosions, anchor drag by commercial vessels, and suspected deliberate interference. In many cases, investigation and criminal proceedings remain ongoing to determine the ultimate perpetrator (see Section 1 for details). The ambiguity over the nature of the acts is itself operationally significant: the Baltic's shallow waters, dense commercial traffic, and overlapping jurisdictions create a structural environment in which deliberate and accidental damage are difficult to distinguish in the short term, and in which plausible deniability creates opportunities for deliberate interference. The pattern is more analytically important than any single incident. First, subsea energy infrastructure in European waters is now operationally vulnerable to physical disruption from sources ranging from state actors to commercial vessels operating with blurry ownership structures. Second, the Baltic is a low-attribution environment by design: shallow waters, dense traffic, and overlapping jurisdictional waters together make accidental anchor damage and deliberate sabotage operationally indistinguishable in the short term. Third, the repair gap that the Balticconnector rupture first exposed has been confirmed by every subsequent incident: HVDC cable repair takes between two and five months on a Baltic timeline, depending on the season and the availability of specialised cable-laying vessels, and gas pipeline repair takes longer still. Fourth, single events can disable energy and data assets simultaneously.
4.1.4 Repair capacity and the post-incident response
The post-incident picture in the Baltic is shaped by three constraints that together explain why repair times have stretched and why the gap between an incident and its resolution is now itself a material vulnerability. First, the global fleet of specialised cable-laying and cable-repair vessels is small, geographically dispersed, and overwhelmingly contracted to commercial telecommunications operators on long-term arrangements; access to repair vessels on short notice depends on contractual priority that Nordic and Baltic operators have not historically held.
Second, HVDC power cable repair requires heavier handling equipment and specialist jointing techniques distinct from the telecommunications cable repair toolkit, and a smaller subset of the global fleet is equipped accordingly.
Third, weather windows in the Baltic are narrow in winter, when shorter daylight, ice formation in the Bay of Bothnia and Gulf of Finland, and frequent storm activity all narrow windows of opportunity for repair works. The combined effect is that a single fault on a Baltic HVDC cable now plausibly takes between two and five months to resolve from incident to restoration, with the variance dominated by season and vessel availability rather than by the technical complexity of the repair itself. The institutional response to this is treated in Section 4 and the recommendations in Section 8.2; the point in this section is that the repair gap is a vulnerability of its own, not merely a consequence of the underlying physical exposure.