The most vulnerable targets in Finland are identified as the defense industry and activities directly supporting Ukraine. Jyrki Isokangas, a retired colonel and university lecturer at the University of Jyväskylä, analyzes the strategic intent behind these actions. He suggests Russia is attempting to drive a wedge between Western nations by creating an atmosphere in which aiding Ukraine is perceived as a burden or a risk. “Russia is trying to create an atmosphere in Western countries in which helping Ukraine is seen as something that you shouldn’t or can’t do,” Isokangas said. Despite this pressure, he does not believe Russia intends to challenge NATO through direct military action. President Alexander Stubb has urged the Finnish public to mentally prepare for the possibility of such acts, reinforcing the government’s stance on resilience over alarmism.
Cyber-Espionage and the “Laundry Bear” Group
Parallel to physical sabotage concerns, Supo, in collaboration with the Finnish Defence Intelligence Agency and the US National Security Agency, issued a new warning regarding cyber-espionage. The agencies highlighted a Russian state-supported threat actor known as “Laundry Bear.” This group poses a serious threat to organizations in public administration, critical infrastructure, and the defense sector.
Laundry Bear’s primary objective is to infiltrate corporate email systems using methods described as simple but effective, such as social manipulation, impersonation, and the use of stolen user IDs. The group’s victim list includes military industry operators, state authorities, technology companies, and third-sector organizations. The main targets of these operations are NATO countries, including Finland, as well as Ukraine. This cyber activity aligns with broader European responses; on 13 July, the EU and the UK imposed sanctions on individuals considered responsible for systemic cyberattacks, with Hungary also condemning the activities.
Infrastructure Vulnerabilities and Data Center Security
The scope of the security warning extends beyond traditional military targets to the nation’s digital infrastructure. Supo analysts have raised concerns about concealed security risks associated with foreign-owned data centers. Finland’s energy profile, characterized by cheap, nearly emissions-free electricity and a cool climate, has attracted significant investment. The country currently hosts approximately 35 data centers with a capacity of over one megawatt, with more than 100 new projects underway.
Veli-Pekka Kivimaki, a Supo analyst, noted that while data center investments are generally beneficial, scrutiny is necessary when owners are linked to authoritarian states such as China or Russia. “For example, China has legislation that allows it to force a company to cooperate. So, if there is such a state actor in the background, there’s a risk that data will start going to places we don’t want it to go,” Kivimaki explained. He warned that these states may attempt to use Finland to bypass restrictions on technology exports. Kivimaki urged local host governments to prioritize security over revenue and to contact Supo before approving any new foreign-owned data center projects.
Internal Accountability and Espionage Countermeasures
Amidst these external threats, internal integrity within Finnish security services remains a focal point. Antti Peltari, the former head of Supo, has been charged with breach of official duties. The case concerns the involvement of pensioners in efforts to counter Russian espionage, highlighting the complex and ongoing nature of intelligence gathering and the strict accountability standards applied to those who have led these agencies.
As Finland and its NATO allies navigate this heightened threat environment, the focus remains on a dual approach: deterring physical and cyber incursions while securing the digital infrastructure that underpins modern defense and society. The next confirmed developments will likely involve further regulatory actions regarding data center approvals and continued intelligence sharing between Finnish and allied agencies to track the activities of groups like Laundry Bear.
