Yi Peng 3 Cable Cutting Incident

Overview

In late 2024, the Chinese-flagged cargo vessel Yi Peng 3 was linked to the damage of critical subsea telecommunications cables in the Baltic Sea, disrupting connectivity between several Northern European states. The incident occurred amid heightened geopolitical tensions and raised concerns among European governments and NATO regarding the vulnerability of undersea infrastructure to hybrid threats. While officially described as an accident, the circumstances surrounding the vessel’s movements and the nature of the damage led to suspicions of deliberate interference.

Incident:

The Yi Peng 3, a commercial bulk carrier, was transiting the Baltic Sea when multiple subsea telecommunications cables were severed or damaged within a short time frame. Maritime tracking data indicated that the vessel significantly reduced speed and manoeuvred in proximity to known cable routes, behaviour inconsistent with standard transit patterns. Investigations by regional authorities suggested that the vessel may have dragged its anchor across the seabed, a method capable of damaging or cutting cables.

The affected infrastructure included key data links connecting countries such as Finland, Estonia, and Germany. European maritime authorities, supported by NATO surveillance assets, monitored the vessel’s movements before and after the incident. Although the ship continued its journey following the event, the pattern of activity triggered a multinational investigation involving several Baltic states.

Impact:

The incident caused temporary disruption to telecommunications services and data transmission capacity in the affected regions. While redundancy in European network infrastructure prevented widespread outages, the damage highlighted the fragility of subsea cables as critical infrastructure. Repair operations required specialised cable-laying vessels and took several days to complete, incurring financial costs and operational delays.

More significantly, the incident underscored the strategic vulnerability of undersea communications networks that carry the vast majority of global internet traffic. It heightened concerns among EU and NATO members about the potential for covert or deniable attacks on critical infrastructure, particularly in strategically sensitive maritime regions such as the Baltic Sea. The event contributed to increased calls for enhanced maritime domain awareness, infrastructure protection measures, and coordinated response mechanisms among allied states.

Attribution:

Attribution remains contested. The Yi Peng 3 is a Chinese-flagged commercial vessel, and no definitive public evidence has confirmed intentional state-directed sabotage. However, the vessel’s anomalous movement patterns, combined with the concentration of damage along its route, raised suspicions among European intelligence agencies.

Chinese authorities have not formally accepted responsibility and have characterised the incident as a maritime accident. Western assessments remain cautious, noting the possibility of either negligent seamanship or deliberate grey-zone activity designed to test infrastructure resilience while maintaining plausible deniability.

Lessons:

The Yi Peng 3 incident illustrates the vulnerability of subsea infrastructure to low-tech but high-impact methods, such as anchor dragging, which can be conducted under the guise of routine maritime activity. It highlights the challenges of attribution in hybrid warfare environments, where actions may fall below the threshold of armed conflict and remain legally ambiguous.

The case underscores the need for improved seabed domain awareness, including real-time monitoring of vessel behaviour near critical infrastructure. It also demonstrates the importance of infrastructure redundancy, rapid repair capabilities, and stronger international cooperation in protecting shared undersea assets. Furthermore, the incident has reinforced calls for clearer legal frameworks and rules of engagement to address suspicious activities in international waters.