The cyber threat against the Danish railway sector (2021)

This is an archived version of the threat assessment of the cyber threat against the railway sector in Denmark. The latest assessment from Centre for Cybersecurity can be found here: The cyber threat against the Danish railway sector.

The purpose of the threat assessment is to inform decision-makers in the sector of the nature and level of the various cyber threats, in order for the sector to gain knowledge relevant to mitigate these threats.

The threat from cyber criminality is VERY HIGH. Cyber criminals carry out many different types of cyber attacks against companies and authorities in the sector. Aside from having economic consequences, cyber crime can, in the worst case, disrupt operations within the sector.

The threat from cyber espionage is HIGH. The threat especially emanates from foreign states, that have an interest in stealing information from companies and authorities within the railway sector, for instance in relation to large tenders, based on economic or geopolitical interests.

The assessment also describes the less severe threats from destructive cyber attacks, cyber activism and cyber terror. Finally, the assessment outlines how the signaling system has changes the prerequisites for cyber security in the railway sector.