Why Subsea Cable Risks Threaten UK Critical Sectors

For decades, subsea infrastructure has been regarded within the telecommunications industry as a given: stable, resilient and outside the scope of existential threat. Yet a new UK parliamentary report warns the assumption could be dangerously complacent.

In its landmark publication, Subsea Telecommunications Cables: Resilience and Crisis Preparedness, the Joint Committee on the National Security Strategy concludes there is a "strategic vulnerability in the event of hostilities".

For operators, vendors and policymakers, the message is clear: the status quo will not hold. Greater regulatory oversight, heightened security obligations and a better national investment are no longer optional.

Challenging the 'business-as-usual' mindset

The committee’s findings expose a significant misalignment between the deteriorating geopolitical climate and the prevailing attitude within parts of government and industry. Many stakeholders, the report notes, remain fixated on routine risks such as accidental damage from fishing vessels or anchor drags, rather than preparing for deliberate state-backed disruption.

The tension was exemplified during evidence sessions. The then-Minister for Data Protection and Telecoms dismissed the committee’s work as focused on "apocalyptic" scenarios and accused it of "overegging this pudding". The committee’s response was unequivocal: "We disagree. Focusing on fishing accidents and low-level sabotage is no longer good enough."

The report further highlights the dangers of industry risk perspectives shaping national security policy. "Individual operators have few financial incentives to prepare for a crisis that may never come," the report observes. The government, it says: "has a duty to prepare competently for low-likelihood, high-risk scenarios".

Statements from senior executives reinforced this disconnect. Alex Towers, Director of Policy and Public Affairs at BT Group, for example, argued that a major coordinated attack was "hard to imagine" and "seems a very distant prospect from where we are today and what we know about everything from the past hundred years’ worth of protecting this infrastructure."

Exposing critical system vulnerabilities

Beyond mindset, the inquiry sets out a detailed picture of technical and systemic weaknesses, raising urgent concerns for telecommunications strategists and security leaders.

The physical concentration of landing stations and terrestrial routing points is flagged as a critical risk. At Bude in Cornwall, just two cables carry roughly 75% of the UK’s transatlantic capacity, an arrangement the report describes as susceptible to even "unsophisticated sabotage". Vodafone reinforced the concern in a written submission, highlighting that the "funnelling of terrestrial cables to data centres remains a concern".

The UK government’s resilience framework is also criticised for an over-reliance on cable volume rather than system robustness. The committee found "limited understanding of how much damage the system can sustain before data stops rerouting properly", a blind spot that could trigger catastrophic service loss.

The report also highlights the challenge of inadequate repair capacity:  The UK currently lacks sovereign repair capability, with repair ships operated by foreign-owned companies and an ageing fleet. In a crisis, the report warns that national priorities may be overlooked. One witness suggested that French state interests would likely guide decisions, with Vodafone, among others, urging the government to "consider developing a sovereign repair capability".

Sector-wide consequences of cable disruption

The committee goes further, detailing the ripple effects of subsea disruption across multiple critical sectors. The evidence paints a picture of interdependence, where failure in one area could create cascading effects across the economy and public life.

The financial industry, responsible for trillions in daily transactions, is described as acutely vulnerable. Laura Catterick, Director of Resilience and Cyber at UK Finance, labelled a catastrophic disruption "highly unlikely" but admitted the impact would be severe and largely untested.

She pointed to a knowledge gap across the sector, acknowledging that there is no "sector view" of reliance on cables and that "we do not know whether there are choke points, vulnerable cables or more important cables".

Logistics and transport systems could also face major disruption, especially if payment networks or just-in-time supply chains were impacted.

The report compares potential effects to the August 2023 air traffic control failure, which disrupted 700,000 passengers and cost approximately £100 million (US$124 million), to illustrate the scale of possible economic fallout.

A systemic disruption would also quickly affect international communications. Alex Towers at BT Group warned that severe damage would undermine access to global domains such as ".com" or ".eu".

While ".uk" sites would be initially more resilient, he cautioned that "it would not take a huge amount of time for .uk to start encountering problems" if the Domain Name System were degraded.

While core NHS and emergency systems are UK-based, vulnerabilities still exist. Dr Fenella Wrigley MBE, Chief Medical Officer at London Ambulance Service and NHS England Advisor, confirmed that care records and ambulance dispatch systems are resilient. However, she warned that slower internet speeds could trigger "glitches affecting access to emergency services' patient notes". In such a scenario, responders might need to revert to paper-based alternatives and radio communications.

A blueprint for national resilience

The committee’s recommendations amount to a comprehensive roadmap for strengthening subsea resilience. The measures represent a structural shift in how the UK approaches telecommunications security, one with direct consequences for operators, vendors and investors.

The acquisition of a "genuinely sovereign cable repair ship by 2030" is highlighted as a cornerstone necessity. Complementing this, the committee recommends creating a Royal Navy reservist programme to ensure specialist skills in cable repair are available during emergencies.

The report is also scathing of current deterrence postures, concluding that military concepts "are too timid". It calls for a more assertive stance with "punitive consequences that go beyond private or public attribution". In parallel, it urges a complete overhaul of outdated legal frameworks, some more than 140 years old, introducing stronger penalties and new legal jurisdictions for prosecuting saboteurs.

The committee recommends that all UK landing stations be "target-hardened to sufficient levels to deter state-backed sabotage" and proposes exploring the creation of "cable protection zones" in critical areas.

Governance is included in the focus. The committee calls for the establishment of a "joined-up subsea cables function providing a centralised point of contact for industry". To complement this, Vodafone advocated for an "Information Sharing and Analysis Centre for subsea cable operators to share real-time data and threat intelligence".

The industry response imperative

The Joint Committee’s report delivers a decisive warning to the telecommunications sector. What was once seen as a stable background system is now positioned at the front line of national security. For businesses, the implications extend beyond compliance, instead involving board-level strategic risk, investor assurance and the ability to demonstrate resilience to customers and governments alike.

As geopolitical tensions intensify, the industry faces a clear choice; embrace the new security paradigm or risk being outpaced by regulatory intervention. The report makes one conclusion unavoidable: the next era of connectivity will be defined not just by speed and capacity, but by resilience and national preparedness.