Danske Statsbaner

DSB, also known as Danske Statsbaner, functions as Denmark's state rail operator, providing passenger train services nationwide. It manages ticketing through a mobile application, website, physical ticket machines, and partner retailers. These digital and physical channels are central to customer access. The organization's operations depend on information technology systems, including those provided by subcontractors. Software testing environments managed by external partners form part of its IT landscape. Such arrangements introduce supply chain considerations for operational continuity. As the national railway, DSB supports Denmark's public transportation network. Its services are vital for daily commuters and intercity travel. The company operates within a critical infrastructure sector. Its role encompasses ensuring mobility across the country.

DSB has faced two notable cyber incidents impacting its operations. In May 2018, a distributed denial-of-service attack overwhelmed its ticketing and internal communication systems. The attack affected the mobile app, website, ticket machines, and partner retailers, forcing passengers to use alternative methods like onboard purchases. Safety systems remained operational, preventing endangerment. Authorities investigated the novel attack technique to improve resilience. No ransom demands were reported. In October 2022, a cyber attack via an IT subcontractor's software testing environment caused a complete train standstill. The subcontractor, Supeo, shut down servers after discovering unauthorized access by criminal hackers. This impaired drivers' operational capabilities. DSB classified the incident as economic crime rather than targeted infrastructure sabotage. The attackers' identity was not immediately determined. Investigations continued at the time of reporting.