Repeated Russian fishing-vessel movements across Svalbard subsea cable routes raise
critical-infrastructure monitoring concerns without establishing hostile activity.
03 September 2026 · Svalbard / Norwegian Arctic
Maritime Security / Critical Infrastructure
Priority
ELEVATED
Status
DEVELOPING
Region
SVALBARD
Category
CUI / GREY-ZONE
Monitoring Focus:
Russian fishing-vessel movements around Svalbard subsea infrastructure, repeated cable-route crossings,
changes in vessel behaviour, AIS anomalies, Norwegian surveillance activity, cable performance and
indications of infrastructure interference.
Executive Assessment
Multiple Russian fishing and factory vessels have recently made repeated passes across areas containing
the Svalbard Undersea Cable System. Publicly available AIS tracks reported by High North News
identify Arctica, Bootes, Mekhanik S. Agapov, Kapitan Sulimov, Lira and
Kurshskaya Kosa among vessels making multiple crossings.1
The movements do not establish surveillance, sabotage or attempted interference.
Fishing activity can naturally produce repeated tracks, low-speed manoeuvring and multiple passes through
the same area, while AIS data alone cannot show what equipment is being operated beneath the surface.
The activity is nevertheless intelligence-relevant because it is occurring over strategically important
communications infrastructure amid heightened Norwegian concern over Russian maritime intelligence activity
and the vulnerability of critical subsea systems.13
Key Intelligence Requirement
The question is not whether Russian fishing vessels are present near Svalbard. It is whether their movement
begins departing from normal fishing behaviour in ways that correlate with critical infrastructure locations,
previous intelligence indicators or subsequent infrastructure disruption.
The Infrastructure Beneath the Tracks
The Svalbard Undersea Cable System provides the principal fibre-optic connection between mainland Norway
and the archipelago. Its significance extends beyond ordinary civilian connectivity because Svalbard hosts
strategically important satellite and communications infrastructure.
This creates a different analytical environment around vessel activity. A fishing vessel crossing ordinary
seabed may carry little security significance; repeated movement over known critical infrastructure requires
additional context.
In January 2022, one of the two fibre-optic cables connecting Svalbard with mainland Norway stopped functioning.
Investigators assessed that the damage was probably caused by human activity. AIS records subsequently showed
the Russian trawler Melkart 5 repeatedly crossing the cable route in the period preceding the failure.1
Norwegian authorities ultimately closed the investigation because there was insufficient evidence to establish
criminal activity or demonstrate that the trawler caused the damage. The earlier incident illustrates both the
physical vulnerability of subsea infrastructure and the difficulty of attribution where normal commercial maritime
activity overlaps sensitive infrastructure.
Russian Fishing Vessels Already Sit Inside Norway’s Security Debate
In July 2025, Norway sanctioned Russian fishing companies Norebo JSC and
Murman Seafood, aligning with EU measures. The Norwegian government said the listings were
based on assessments that the companies formed part of a Russian state-sponsored surveillance and intelligence
campaign targeting critical underwater infrastructure in Norwegian and allied maritime areas.
Those sanctions do not establish that the vessels currently crossing the Svalbard cable routes are conducting
intelligence operations. They do, however, change the analytical baseline by showing that Norway already assesses
parts of the Russian fishing sector as potentially capable of functions extending beyond fisheries activity.2
The Lira Connection
One vessel identified in the latest activity warrants additional contextual attention. The Russian factory trawler
Lira was inspected alongside sister vessel Ester in Kirkenes in November 2022.
Norwegian police reportedly found older communications equipment capable of accessing military frequencies and
referred the matter to Norway’s Police Security Service.1
The equipment did not establish espionage, and no public finding concluded that Lira had conducted
intelligence activity. Its presence among vessels now repeatedly crossing Svalbard cable routes therefore warrants
contextual monitoring — but not attribution.1
Why It Matters
The significance of the current activity lies less in what has been proven than in how difficult maritime intent
can be to determine before an incident occurs.
Civilian fishing vessels can operate legitimately near critical infrastructure, while normal fishing behaviour may
include many of the same characteristics that complicate security monitoring: low speeds, repeated passes,
prolonged presence within confined areas and deployment of equipment into the water.
NORMAL FISHING ACTIVITY
vs.
POTENTIAL INFRASTRUCTURE RECONNAISSANCE
The distinction becomes clearer only when vessel movement is combined with ownership, historical activity,
proximity to infrastructure, changes from normal operating patterns, underwater equipment, communications behaviour,
official surveillance responses and any subsequent infrastructure anomalies.
Related Analysis
From Crimea to Svalbard: Why Norway Seized a Russian State Vessel
Norway’s seizure of Professor Molchanov concerns a different legal mechanism and is not operationally
connected to the fishing-vessel movements. Together, however, the cases show how maritime movement around Svalbard
increasingly intersects with jurisdiction, state assets, critical infrastructure and security exposure.5
Multiple Russian fishing and factory vessels have recently made repeated crossings over areas containing the Svalbard subsea cable routes.1
Russian fishing remains permitted in designated northern Norwegian waters under existing fisheries arrangements.1
Norway considers protection of critical underwater infrastructure a national security priority.3
Norway sanctioned Norebo JSC and Murman Seafood in 2025 over alleged links to Russian state-sponsored surveillance and intelligence activity targeting underwater infrastructure.2
Svalbard’s subsea communications infrastructure has previously suffered unexplained physical damage associated with probable human activity, although no Russian vessel was proven responsible.1
What Remains Unconfirmed
Whether any of the latest vessel movements are connected to intelligence collection.
Whether repeated crossings correspond to deliberate observation of cable infrastructure.
Whether any vessel deployed equipment near the cables for purposes unrelated to normal fishing.
Whether Norwegian authorities currently assess the activity as suspicious.
Whether the movements differ materially from historical fishing behaviour in the same areas.
Whether any cable degradation, communications anomaly or physical damage has occurred during the latest activity.
P&C Assessment
The latest Russian fishing-vessel movements around Svalbard should be treated as an
indicator requiring monitoring rather than evidence of hostile action.
Repeated crossings over critical infrastructure are analytically relevant because the same behaviours associated
with legitimate fishing can also provide opportunities for seabed observation, infrastructure mapping or physical
interaction with underwater systems.
Context increases the significance. Norway has previously sanctioned Russian fishing companies over alleged
intelligence activity involving critical underwater infrastructure, has experienced unexplained damage to the
Svalbard cable system and continues to identify Russian deep-sea capabilities as a serious security concern.
None of those factors proves that the vessels currently operating near the cables are engaged in hostile activity.
The principal intelligence requirement is to establish a
behavioural baseline and determine whether route repetition, speed,
manoeuvring, time spent directly above infrastructure, gear deployment, AIS activity, vessel ownership and subsequent
infrastructure performance begin moving together.
Bottom line:
The present activity does not demonstrate sabotage or espionage. It demonstrates why
critical-undersea-infrastructure security increasingly depends on recognising when otherwise legitimate maritime
movement begins behaving differently around strategically important assets.
Indicators to Watch
01
Precision Route Repetition
Further vessels repeatedly following the same sections of known subsea cable routes rather than broader fishing patterns.
02
Low-Speed or Stationary Activity
Extended loitering, very low-speed movement or repeated manoeuvring directly above critical infrastructure.
03
Behavioural Deviation
Individual vessels behaving materially differently from their historic fishing patterns in the same region.
04
AIS Anomalies
Unexpected transmission gaps, identity changes, unusual positional behaviour or unexplained AIS shutdowns around infrastructure corridors.
05
Equipment Indicators
Evidence of seabed-contact fishing gear, unusual deck activity, remotely operated equipment or systems capable of interacting with underwater infrastructure.
06
Norwegian Surveillance Response
Increased Coast Guard, naval, maritime patrol aircraft or security-service attention around specific vessels.
07
Cable Performance
Communications degradation, unexplained outages, physical faults or maintenance activity affecting the Svalbard connection.
08
Vessel Ownership and Affiliations
Appearance of vessels connected to sanctioned companies or entities previously associated with Russian intelligence activity.
09
Geographic Expansion
Similar repeated movements around other Norwegian, North Atlantic or Arctic subsea infrastructure.
10
Allied Response
Changes in NATO surveillance, infrastructure-protection measures, navigational restrictions or coordinated monitoring around Arctic cable systems.
Assessment Confidence
HIGH CONFIDENCE that multiple Russian fishing vessels have recently conducted repeated movements across areas containing the Svalbard subsea cable routes.
HIGH CONFIDENCE that the cables constitute strategically important Norwegian critical infrastructure and their protection is an established security priority.3
MODERATE CONFIDENCE that repeated vessel behaviour around such infrastructure represents a meaningful intelligence indicator when assessed against historical patterns and additional information.
LOW CONFIDENCE that the present movements themselves represent deliberate Russian surveillance, reconnaissance or preparation for sabotage. Available public information does not establish hostile intent.
Sources
Inline superscript numbers correspond to the source list below.
This alert reflects information available at the time of publication. AIS movement alone cannot establish vessel
intent, surveillance activity or interference with subsea infrastructure. Assessment should be updated if additional
vessel data, Norwegian official reporting or infrastructure-status information becomes available.
Dean Mikkelsen is Founder and Editorial Director of Power & Corridors. Based in Abu Dhabi, he focuses on geopolitical risk, maritime security, trade corridors, energy, logistics and critical infrastructure.
