oiip

On the Triple Fragility of Austria’s Infrastructure

Commentary by By Robin Forsberg and Christoph Mayer
9 February 2026

Austria may be landlocked, and thus, its digital and economic lifelines depend on infrastructure it cannot control. The Baltic Sea’s recent spate of cable incidents, from Nord Stream in 2022 to Balticconnector in 2023 to multiple fibre and power cuts through 2024 and 2025, has exposed Europe’s reliance on fragile seabed infrastructure. But Austria faces a deeper challenge: a triple fragility that compounds across three dimensions.

First, connectivity dependence: Austria’s digital traffic flows through European corridors that it cannot protect. Simultaneously, EU frameworks draw the neutral republic into the murky waters of Baltic security, where the line betwen EU resilience initiatives and NATO operations blurs, and solidarity obligations risk entanglement in conflicts that Austria’s constitution was designed to avoid. Second, concentrated compute: more than 80% of national data centre capacity is in Vienna, where grid constraints are increasingly binding (DCByte, 2025). Third, energy system vulnerabilities: headline renewable success masks structural dependencies on gas backup and transmission bottlenecks. Each weakness amplifies the others. Vienna is both the country’s digital and energy core, and its Achilles' heel.

The Baltic Theatre

Since 2022, the Baltic has become a theatre for hybrid disruptions. Swedish and Danish investigators confirmed sabotage at Nord Stream but ended their inquiries in 2024 without naming perpetrators. In October 2023, the Balticconnector pipeline between Finland and Estonia, along with adjacent telecom cables, were damaged when a ship’s anchor dragged along the seabed.

The winters of 2024 and 2025 brought an unprecedented wave of incidents. On November 17–18, 2024, two critical cables—the BCS East-West Interlink connecting Lithuania to Sweden and the C-Lion1 running from Helsinki to Rostock—were severed within hours of each other. Investigators suspect the Chinese bulk carrier Yi Peng 3 dragged its anchor across both cables after departing the Russian port of Ust-Luga. On Christmas Day 2024, the shadow fleet tanker Eagle S allegedly damaged the Estlink 2 power cable between Estonia and Finland, along with four telecommunications cables, reducing cross-Baltic power capacity from 1,016 MW to just 358 MW. Fresh damage was detected on C-Lion1 in February 2025. Each incident forced Europe to rely on longer, less efficient routing options ​(RIPE Labs, 2024)​.

Europe’s policy machinery is responding: NATO launched Baltic Sentry on 14 January 2025 to enhance surveillance of critical undersea infrastructure (NATO, 2025). At the regulatory level, the EU has sought to hardwire resilience into law: the Critical Entities Resilience (CER) Directive tightens physical resilience obligations, while the Network and Information Security Directive (NIS2) sets cybersecurity standards for essential services like energy, healthcare, and digital infrastructure across member states (European Union, 2024). In February 2025, the Commission issued its Action Plan on Cable Security, built on a "whole resilience cycle" of prevention, detection, response, and deterrence. Yet on 7 May 2025, the Commission formally warned 19 countries—including Austria—that they had not yet fully written NIS2’s requirements into their national laws (European Union, 2025). Europe’s paper shields still lag the threat tempo.

Austria’s Connectivity Exposure

Austria’s geographic position and network architecture provide meaningful insulation from direct Baltic cable disruption. The Vienna Internet eXchange (VIX) serves as Austria’s primary internet hub with over 180 participating organizations and peak traffic of 1.44 Terabits per second. Austrian traffic flows predominantly west through Germany: A1 Telekom Austria’s international infrastructure spans 6,478 km of fibre with primary routes from Vienna toward Frankfurt, Stuttgart, and Munich. Frankfurt’s DE-CIX—the world’s largest internet exchange—serves as Austria’s gateway to global connectivity.

Austria’s internet infrastructure may seem self-sufficient, but it’s deeply dependent on its neighbours. When an undersea cable in the Baltic Sea was cut in November 2024, internet traffic across Europe had to find alternative routes, causing noticeable slowdowns—including in Austria, even though it had no direct connection to that cable. According to measurements from RIPE Atlas, a global network of sensors that monitors internet performance, 20–30% of affected routes experienced increased delays. Austria’s main internet exchange point in Vienna is a regional hub, but because it’s concentrated in a single city, any local disruption there could knock out the country’s connectivity more broadly.

Fundamentally, Austria’s digital economy depends on a European network it cannot protect. The country sits at the intersection of European data flows without controlling the choke points. As an EU member, Austria bears political and financial responsibility for infrastructure security regardless of its routing architecture.

Current routing patterns, moreover, may not reflect future demand. As AI-driven computing requirements surge, Austrian enterprises are facing significant costs: average electricity spot market prices in 2025 reached 99 Euro/MWh in Austria, versus just 41 Euro/MWh in Finland (Fraunhofer Institute, 2025). Nordic countries provide data centres powered by abundant renewable energy, which costs less than half as much as energy in Austria. If domestic grid constraints limit Vienna expansion, Austrian businesses may offshore workloads to Nordic facilities, transforming today’s minimal Baltic dependence into a strategic vulnerability of tomorrow. This growing dependence on cross-border digital infrastructure raises a deeper question: how well is Austria’s political and legal framework equipped to respond to shared European security challenges?

Solidarity Without Alignment

Austria’s constitutional neutrality, enshrined in the Federal Constitutional Law of 1955, prohibits membership in military alliances. Yet this status has evolved since its EU accession in 1995. Article 23j of the Federal Constitutional Law permits full participation in the EU’s Common Foreign and Security Policy, including crisis management operations.

The third Joint Declaration on EU-NATO cooperation explicitly shapes this relationship, "encourag[ing] the fullest possible involvement of the EU members that are not part of the Alliance in its initiatives" and identifying critical infrastructure protection as a key area for cooperation. For Austria, the declaration reinforces that European defence must be "complementary to, and interoperable with NATO"—implying alignment with NATO standards even without membership ​(European Council, 2023)​.

Austria exercises responsibility for submarine cable security through three mechanisms:

Financial burden-sharing. Austria contributes to the Connecting Europe Facility (CEF) and European Defence Fund, which will co-finance the proposed EU Cable Vessels Reserve Fleet. Austrian taxpayer funds will directly subsidize the maritime security assets of coastal states.

Regulatory alignment. The CER Directive requires Austria to implement the concept of critical infrastructure resilience into national law. Cable operators serving six or more member states become "critical entities of particular European significance" and are subject to Austrian oversight, regardless of their physical location.

Technological contribution. Lacking a navy, Austria contributes to the "Detect" and "Prevent" pillars through its industrial base. Vorarlberg-based Subdron develops autonomous underwater inspection software; the Austrian Institute of Technology contributes to maritime surveillance through the VIGIMARE and MARNG projects ​(AIT, 2019)​. Austria also participates in PESCO projects including Military Mobility, Maritime Surveillance (MARSUR), and coordinates the CBRN Surveillance as a Service project ​(European Defence Agency, 2018)​. Austrian staff officers serve in EU naval missions including EUNAVFOR MED IRINI ​(EUNAVFOR, 2023)​. In an era of grey-zone warfare, however, technological relevance brings exposure: firms strengthening European detection capabilities become targets for the very actors they help monitor.

Vienna has thus outsourced kinetic maritime security to NATO while becoming a stakeholder in the EU soft security architecture. This "solidarity without alignment" reconciles constitutional constraints with collective security imperatives—but Austria pays for infrastructure protection whose safeguarding falls outside national capabilities, relying on political solidarity that falls short of mutual defence guarantees.

Energy System Fragility

Austria’s energy system reveals a second layer of fragility precisely where it appears strongest. The country achieved 87.8% renewable electricity in 2023 ​(Eurostat, 2025)​ and became a net exporter in 2024 for the first time since 2009, shipping 4,747 GWh abroad, but this masks structural vulnerabilities ​(APG, 2025)​.

The core bottleneck runs northeast to west. Surplus solar and wind power generated in eastern Austria must traverse limited transmission capacity to reach pumped storage facilities in the western Alps. Austrian Power Grid (APG) required redispatch operations on 203 days in the first three quarters of 2024 at a cost of €86.5 million, on track to exceed the €141.6 million spent across all of 2023 by roughly 10% on an annualized basis (APG, 2025). This constraint forced renewable curtailment totalling 57,400 MWh in 2024 alone, which is economically productive generation wasted because the grid cannot move electrons where they are needed. For data centres, grid constraints are increasingly the binding factor.

The EU is funding cross-border grid reinforcements under its TEN-E framework, including upgrades to Austria’s high-voltage transmission network. But adding capacity does not solve a subtler problem. Most wind and solar installations are "grid-following": they feed power into a system whose stability is maintained by someone else. Conventional power plants with heavy spinning turbines have traditionally played that role, anchoring the grid’s frequency and preventing cascading failures. As coal plants close across Europe, fewer of these stabilizing generators remain online. Austria increasingly depends on pumped hydro in the Alps and gas-fired reserves to fill the gap.

The gas dependency compounds the problem. Before November 2024, Russia supplied approximately 60 TWh annually, representing 80% of Austria’s gas imports (ICSC, 2024). Gazprom’s supply halt following an arbitration dispute forced immediate diversification, but the structural dependency persists. Approximately 900,000 households still use gas heating, and gas-fired plants remain essential for "dunkelflaute" backup—extended periods when neither wind nor solar generates electricity and hydropower faces seasonal limitations ​(European Commission, 2024)​. APG has assessed that abandoning gas reserves would be "irresponsible at the moment" given the need for flexible capacity as renewable penetration increases (APG, 2025). Austria’s 100% renewable electricity target for 2030 differs fundamentally from hourly reliability; gas backups remain essential for extended periods of low renewable generation, regardless of installed capacity.

The Compute Collision

This constrained system is facing increasing demand in artificial intelligence. The International Energy Agency projects global data-centre electricity demand to more than double to approximately 945 TWh by 2030, with data centres driving over 20% of demand growth in advanced economies. Goldman Sachs forecasts a 165% rise in data-centre power demand by 2030 compared with 2023 (Goldman Sachs, 2025). The Uptime Institute finds that power remains the leading cause of impactful outages, and that when outages occur, costs rise. AI’s growth is colliding with the electricity and redundancy Austria actually has, not the capacity it desires.

More than 80% of national data-centre IT load sits in Vienna—the same city where grid capacity limits were reached "more often than ever before" in 2024. Microsoft’s August 2025 launch of Azure Austria East in Vienna, with three availability zones, signals growing demand for local compute. Google Cloud has announced similar plans for a Vienna region. Yet each new facility intensifies pressure on a grid already operating at its limits.

The Policy Trilemma

This creates a strategic tension with no comfortable resolution. Austrian policymakers face a three-way trade-off in which improving any two dimensions worsens the third.

Reduce connectivity dependence by building domestic compute capacity? This increases energy demand that existing infrastructure can only satisfy through continued gas imports—straining relations with European partners who bore high costs to exit Russian energy, a turnaround that Austria implemented in 2024 more out of necessity than by choice.

Reduce energy constraints by accelerating renewable buildout and grid expansion? The pace is limited by APG transmission bottlenecks, permitting timelines, and the need for grid-forming capacity that renewables alone cannot provide. Compute demand grows faster than new capacity can come online.

Preserve neutrality by limiting participation in collective infrastructure defence? This free-rides on security provided by neighbours while Austria’s digital economy depends on the cables they protect. And through EU frameworks, Austria already bears financial and regulatory responsibility for infrastructure it cannot kinetically defend.

Austria’s triple fragility reflects geography, history, and choices deferred. The country sits at the intersection of European energy and data flows yet it does not control the choke points. Its neutrality complicates participation in collective infrastructure defence while EU membership creates obligations that blur the distinction between alignment and solidarity. Its renewable success masks grid constraints that limit how fast new demand can be absorbed.

Policymakers face trade-offs whether they acknowledge them or not. The path of least resistance—incremental adaptation, continued dependence on German corridors, quiet financial contribution to maritime security while avoiding explicit strategic commitments—may prove sustainable. If it does not, the next Baltic cable incident, the next winter grid emergency, the next data-centre connection delay may force a reckoning that Vienna has long deferred. Austria cannot control the sea, but it cannot escape dependence on those who do.

Bibliography

• ​Goldman Sachs. (2025, February 4). Retrieved from https://www.goldmansachs.com/insights/articles/ai-to-drive-165-increase-in-data-center-power-demand-by-2030
• ​NATO. (2025, January 14). Retrieved from https://www.nato.int/cps/en/natohq/news_232122.htm
• ​European Union. (2024, February 19). Retrieved from https://eur-lex.europa.eu/EN/legal-content/summary/making-critical-entities-more-resilient.html
• ​European Union. (2025, May 25). Retrieved from https://digital-strategy.ec.europa.eu/en/news/commission-calls-19-member-states-fully-transpose-nis2-directive
• ​subdron. (n.d.). Retrieved from https://www.subdron.com/services
• ​AIT. (2019). Retrieved from https://www.ait.ac.at/en/research-topics/mobility-data-collection-and-analysis/projects/marng
• ​European Defence Agency. (2018, November). Retrieved from https://www.pesco.europa.eu/wp-content/uploads/2025/11/2025-AT-CBRN-Surveillance-as-a-Service-CBRN-SaaS-Website-leaflet.pdf
• ​EUNAVFOR. (2023, July 20). Retrieved from https://www.operationirini.eu/general-rudolf-striedinger-chief-of-the-austrian-defence-visited-irini-ohq-in-rome/
• ​Fraunhofer Institute. (2025, December). https://www.energy-charts.info/charts/price_average_map/chart.htm?l=en&c=DE&week=02.
• ​European Council. (2023, January). Retrieved from https://www.consilium.europa.eu/en/press/press-releases/2023/01/10/eu-nato-joint-declaration-10-january-2023/
• ​ICSC. (2024, February 19). Retrieved from https://www.sustainable-carbon.org/austrias-dependence-on-russian-gas-rises-to-98-two-years-after-ukraine-war/
• ​European Commission. (2024). Heat Pump Market: Country Fiches. European Commission. Retrieved from https://publications.jrc.ec.europa.eu/repository/bitstream/JRC137131/JRC137131_001.pdf
• ​APG. (2025, February). Retrieved from https://www.apg.at/en/news-press/apg-strombilanz-2024-oesterreich-erstmals-wieder-exportland/
• ​DCByte. (2025, September 8). Retrieved from https://www.dcbyte.com/news-blogs/vienna-data-centre-market-growth-challenges/
• ​RIPE Labs. (2024, November 20). Retrieved from https://labs.ripe.net/author/emileaben/does-the-internet-route-around-damage-baltic-sea-cable-cuts/
• ​eurostat. (2025, February 21). Retrieved from https://ec.europa.eu/eurostat/en/web/products-eurostat-news/w/ddn-20250221-3
• ​APG. (2025, February 28). Retrieved from https://www.apg.at/en/news-press/apg-strombilanz-2024-oesterreich-erstmals-wieder-exportland/