Sightings of unidentified drones forced temporary airspace closures late on September 22, 2025, disrupting multiple commercial airports in Scandinavia. After detecting two to three large drones in restricted airspace, Copenhagen, Denmark’s busiest airport, halted all takeoffs and landings for nearly four hours.
Norwegian authorities likewise closed airspace around Oslo’s main airport for about three hours following multiple drone sightings.
The immediate consequence was widespread flight disruption: dozens of inbound flights were diverted, outbound services delayed or canceled, and thousands of passengers stranded in terminals or forced to reroute.
Authorities described the drones as being operated by a “capable operator”—suggesting deliberate, skillful maneuvers. The drones reportedly turned their lights on and off and appeared to enter from multiple directions.
Because the situation involved full airport terminals, parked aircraft, fuel facilities, and residential areas nearby, security forces refrained from shooting the drones down, citing safety risks.
Danish political leaders characterized the incident as a “serious attack” on critical infrastructure. Despite the lack of definitive attribution, Prime Minister Mette Frederiksen noted that the pattern is consistent with recent hybrid threats and airspace violations in Europe. Russia has refuted any involvement.
The timing is notable: the drone incursions came in the wake of large‑scale cyberattacks that disrupted check‑in and boarding systems at European airports, including Heathrow, Berlin, and Brussels, raising fears that aviation infrastructure has become vulnerable to coordinated hybrid assault.
Security analysts warn that Europe’s civil aviation systems are interconnected and exposed to cascading failures—and call for heavier investment in counter‑drone defenses, tighter airspace regulation, and reinforced cybersecurity protocols.
Since the investigations are still underway, Danish and Norwegian authorities are cooperating closely with each other, reviewing radar records, examining the flight patterns of the drones, and verifying whether the two incidents have any link. No arrests have yet been publicly announced, and the precise motivations are speculative.
These events point to a rapidly evolving landscape in which state and non‑state actors can disrupt critical infrastructure with drones, cyberattacks, and hybrid tactics—compelling nations to rethink how to protect airports, borders, and airspace in the 21st century.