Russian Legion Targets Danish Energy, Health Sites

A newly formed hacker coalition known as the Russian Legion has launched a coordinated cyberattack campaign against Denmark, targeting key sectors and government websites. The group, comprising Cardinal, The White Pulse, Russian Partizan, and Inteid, announced its formation on Jan. 27, 2026. Within 24 hours, it issued an ultimatum demanding that Denmark cancel a 1.5 billion DKK military aid package to Ukraine.

When Denmark ignored the demand, distributed denial-of-service attacks began crippling services across public and private sectors. The energy and healthcare sectors faced repeated disruptions, with sundhed.dk among the early targets. Analysts at Truesec identified Russian Legion as a state-aligned actor pushing geopolitical objectives without direct funding from the Kremlin.

Their tactics combine high-volume traffic floods with psychological threats amplified on Telegram. Researchers warn that while limited in damage, such campaigns create public anxiety and strain cyber defenses.

Read the full report at

Russian Hacker Alliance Targeting Denmark in Large-Scale Cyberattack