2026-08-29 · ebungo · field research · installment 11 of the physical internet · ten live sources, verified 2026-08-29
The Baltic Sea taught the world a lesson about cables, and the world answered by building a navy. Frigates, patrol aircraft, naval drones, an air-defence frigate: all of it watching the water. But nearly every cut of the past two years happened in the shallow apron of sea within sight of land — and the last few metres of it happen on a beach, in a building with a fence. The watched place is the deep sea. The fragile place is the shore.
The modern era of cable fear began in November 2024, when two undersea cables were damaged in the Baltic within 24 hours and officials reached for a word nobody had used for cables in a generation. One unnamed official's framing, preserved in the coverage: "Therefore, we have to state, without knowing specifically who it came from, that it is a 'hybrid' action. And we also have to assume, without knowing it yet, that it is sabotage."[1]
Then Christmas 2024 became the case that would define the whole affair. On 25 December, the oil tanker Eagle S dragged its anchor across the Gulf of Finland seabed, breaking the Finnish–Estonian Estlink 2 power cable and four internet lines; prosecutors said the anchor weighed 11,000 kg and the drag ran 90 km.[8] Prosecutors charged the Cook Islands-registered tanker's Georgian captain, the Georgian first officer, and the Indian second officer with aggravated criminal mischief and aggravated interference with communications.[8] The three denied the charges.[8] The criminal trial hinged on whether the crew should have noticed that the anchor had been dragged behind the vessel for 90 kilometres.[7] In early October 2025, the district court ruled that Finland did not have jurisdiction.[7] On 27 August 2026, the Helsinki Court of Appeal overturned that ruling and ordered the case reopened at district court.[7]
The pattern did not stop while the courts argued.[5] Around new year 2026, Finnish authorities seized a cargo vessel named the Fitburg, flagged in St. Vincent and the Grenadines, travelling from Russia to Israel, detaining its 14 crew members from Russia, Georgia, Azerbaijan and Kazakhstan; by 3 January, two people had been arrested in connection with damage to an undersea telecommunications cable in the Gulf of Finland, between the capitals of Finland and Estonia.[5] Five days later came the next cut: an undersea telecoms cable was damaged in the Baltic Sea on Friday, and Latvian investigators on Sunday boarded a ship in connection with the incident.[4] The cable ran from Sventoji in Lithuania to Liepaja in Latvia, two coastal towns some 65 km (40 miles) apart, and it was not immediately clear what caused the incident.[4] Latvia's prime minister said the damage had occurred near Liepaja — a town, not a deep-sea trench.[4]
And the era's first courtroom is not in the Baltic at all: in Hong Kong, in January 2026, ten witnesses were to be called in a "criminal damage" case against a Chinese captain of a Hong Kong-registered ship alleged to have damaged undersea cables in the Baltic Sea.[6] The captain, Wan Wenguo of the container ship NewNew Polar Bear, is alleged to have caused "criminal damage" to an underwater natural gas pipeline and submarine telecom cables between Finland and Estonia on October 8, 2023 — the Balticconnector incident that predates the whole 2024-2026 cascade.[6]
Undersea cables carry 99% of the data traffic across the oceans.[1] They are not fragile in the deep: fishing vessels are the leading cause of accidental damage, and fishing happens near coasts.[1] Between 1959 and 1996, fewer than 9% of surveyed breaks were due to natural events; the practice of burying cable, widespread from 1980, cut the average fault rate to 0.44 faults per 1,000 km per year.[1] Burial is the quiet defence, and it works — where the seabed lets a plough reach it.
The shallow apron is where the map gets busy, and it has been for a century.[2] The 2008 Mediterranean cascade, which slowed the internet for the Middle East and India, started with damage to SEA-ME-WE 4 and FLAG occurring separately several kilometers apart near Alexandria.[2] Egypt's transport ministry reviewed a day of video footage and concluded no ships were traced sailing through the area of the alleged wire damage.[2] The FALCON cable, cut between Oman and the UAE, was severed by an abandoned anchor weighing five to six tonnes, 56 km from Dubai.[2] In December 2008, three more cables linking Alexandria, Sicily and Malta were cut, and Egypt experienced an overall 80% reduction in internet capacity.[2] Even the modern sabotage debate is old: in February 2008, a UN agency official said "we do not rule out that a deliberate act of sabotage caused the damage to the undersea cables" — before two ships were impounded in April and charged with improperly dropping anchor in the area of the cuts.[2]
The low-tech threat never left. In 2013, three divers were arrested for severing the main cable linking Egypt with Europe.[1] No drone, no navy: three people underwater with a tool.[1] The Baltic fleets guard against a sophisticated adversary; the historical record says the cable's actual enemies are anchors, nets, and the odd determined swimmer.
The most useful number from 2008 belongs to TeleGeography's Stephen Beckert: cable cuts happen "on average once every three days," and "only the first two cuts had any serious impact on the Internet."[2] A cut is routine. What is not routine is a place with no alternative route — which is why the same incident that slows Egypt to a crawl is a footnote in the Atlantic.[2]
Every cable ends somewhere, and that place is chosen to be unremarkable. Cable landing points are usually carefully chosen for little marine traffic, gentle sloping sea-floors, and weak currents, and such locations are rare — so several cable systems share a single landfall.[3] Nearby there is usually a cable landing station or termination station, also often shared, and in some cases the cable travels many miles inland before it terminates.[3] The voltages applied at these stations are not small: 3,000 to 4,000 volts for a typical trans-Atlantic telecommunications cable system.[3]
The landing station is where the deep-sea object becomes a terrestrial machine — and it is a building.[3] The navies patrol the water; the last kilometre of cable crosses fishing grounds, anchorages and surf, and the station itself sits behind a fence.[1][3] The Baltic cuts of 2024-2026 all happened in this apron, not in the deep: the Gulf of Finland is a narrow, shallow, crowded sea, and the cables that failed there run between capitals a few tens of kilometres apart.[4][8] The threat picture that the fleets were built to answer — a covert attack on the open ocean — is not the picture the evidence shows. The evidence shows ships in transit near ports, dragging metal across the seabed, in the busiest water in the region.[4][5][7]
The answer to the 2024 cuts was Baltic Sentry, announced by NATO leaders meeting in Helsinki in January 2025: frigates, maritime patrol aircraft, and a fleet of naval drones to provide "enhanced surveillance and deterrence."[9] NATO's secretary general described "elements of a campaign to destabilize our societies through cyberattacks, assassination attempts and sabotage, including possible sabotage of undersea cables in the Baltic Sea."[9] Latvia's president was candid about the limit: more than 2,000 ships cross the busy waterway every day, and "we can't ensure 100% protection but if we are sending a bold signal then I think that such incidents are going to decrease or even stop."[9] The same coverage introduced the wider frame — "shadow fleet" vessels used by Russia to move oil, arms and grains in violation of sanctions — and reported a false alarm about a shadow-fleet ship near the Baltic Pipe that the Polish foreign ministry and military later said did not happen.[9] The information fog around the cuts is part of the incident.
Eleven months later the response grew again. After a week of unidentified drones over Denmark — Copenhagen Airport, the Nordic region's busiest, closed for hours — NATO said it would "conduct even more enhanced vigilance with new multi-domain assets in the Baltic Sea region," including intelligence, surveillance and reconnaissance platforms and at least one air-defence frigate.[10] The same month it launched Eastern Sentry to bolster Europe's eastern flank in response to Russian drone incursions into Polish airspace.[10]
And still, in the weeks around that escalation, two more cables were cut: the Helsinki–Estonia line and the Sventoji–Liepaja line.[4][5] The fleet could not prevent a container ship and a cargo vessel in transit from damaging cables near the coast; at best it can watch them after the fact. What the powers built in response to the cuts is a surveillance layer over a problem that is mostly happening in the last few kilometres of water and in the courts.
The threatened layer of the cable system is onshore. The deep cable is armoured, buried, and redundant across the big oceans; the first kilometres near land are fishing ground and anchor ground, and the station at the end is a building. The Baltic navy exists because the cuts looked strategic; the cuts themselves were, by every account the courts have produced so far, the work of ships doing ordinary things in a busy sea — with the question of whether the anchor drags were ordered or negligent left to courtrooms in Helsinki and wherever the Fitburg's case lands.[5][7][8]
The honest disagreement in the record is about intent, not about the damage. Some coverage of November 2024 accepted the "hybrid action" framing; the judicial record is built on what ships did, not on who told them to do it.[1][7][8] Finland's long fight over jurisdiction was about legal tools, not facts — a state that cannot try the crew cannot deter the next anchor, whatever the truth of the first one.[7]
Beckert's 2008 observation is the one that still matters: a cut is routine, only a place with no alternatives suffers catastrophically.[2] The Baltic survives its cuts because it has route diversity; Egypt's recurrent pain is the single-cable geography.[1][2] So the real protection is not the frigate — it is the second route, the repair ship, and the recognition that the beach, not the deep, is where the map's weakest line lives.
all cited sources fetched and verified 2026-08-29; verbatim evidence quotes kept in the citation ledger.