Banedanmark exposed rail data, internal files say Russians could track NATO transport on Danish lines

• Ekstra Bladet reports that internal Banedanmark material describes Russian access to all data and the ability to monitor NATO transport on Danish railways.
• The alleged access appears to have lasted for years, raising questions about duration, approvals and audit controls.
• Rail traffic data can reveal more than timetables: cargo flows, bottlenecks and military logistics all become easier to map.
• For Denmark and its neighbours, the issue reaches beyond one agency because rail corridors are part of Nordic and Baltic defence planning.

Internal Banedanmark documents say Russian actors were given "full access" to Danish rail data and, over several years, could follow NATO transport on the country’s tracks. Writing in Ekstra Bladet, the newspaper reports that the Danish rail infrastructure manager’s own material describes access broad enough to cover all data, not a narrow technical slice.

If that account holds, the issue is larger than an IT procurement failure. Denmark is a transit country between continental Europe and the Nordic region, and rail is part of how heavy equipment, fuel, ammunition and personnel move when roads, ports or airfields are constrained. A system that lets an outside actor watch traffic patterns over time does not need classified documents to become useful; repeated observations can show which routes carry unusual loads, which terminals are active at odd hours, and which corridors matter most when allied forces move north.

The unanswered questions are concrete. What data was exposed: live train positions, cargo information, planning systems, historical records, maintenance logs, access credentials, or some combination of them? How long did the arrangement last, and was the access continuous or limited to support windows? Who inside Banedanmark approved it, on what legal and security basis, and did Denmark’s security authorities sign off on the setup or learn about it after the fact?

Those details matter because rail data is cumulative. A single timetable says little. Years of movements can map routines, exceptions and surge capacity. It can also show what Denmark appears to have treated as ordinary civilian traffic but which, in aggregate, points to military readiness: repeated wagon types, recurring destinations, pauses at freight yards near ports, and traffic spikes during allied exercises. The value lies in the archive as much as the live feed.

The case also reaches beyond Denmark. Sweden and Norway rely on Danish territory for parts of their overland connection to the continent, while Finland’s and the Baltic region’s defence planning assumes that transport nodes in neighbouring countries will hold up under pressure. Nordic governments have spent the past few years discussing ammunition stocks, host-nation support and corridor resilience. A rail manager handing broad system visibility to actors from a hostile state would place one of those corridors in a harsher light.

Banedanmark now faces a simpler test than the one that produced this arrangement: publish what systems were opened, to whom, for how long, and under which controls. The trains in question have already run; the server logs will show who was watching.

Källor: Ekstra Bladet