Subsea cables in the Strait of Hormuz are facing heightened security risks as Iranian-linked vessels loiter near critical undersea infrastructure. According to maritime intelligence firm Windward, three sanctioned tankers and an Iranian fishing boat were tracked loitering over major internet cable routes in October 2026. This activity follows warnings from the Islamic Revolutionary Guard Corps (IRGC) regarding potential attacks on telecommunications assets. The regional tension stems from ongoing military conflicts involving the US and Israel, placing global internet connectivity and the digital security of several Gulf nations at significant risk.
Suspicious maritime activity near critical cable corridors
Maritime intelligence data indicates that several vessels linked to Iran have been performing suspicious maneuvers near essential undersea telecommunications lines. Windward, a maritime intelligence firm, reported in October 2026 that three sanctioned tankers and an Iranian fishing boat were tracked loitering in the Gulf of Oman near the Strait of Hormuz. These vessels were observed slowing down and looping around multiple cable routes, according to a report by the Financial Times.
The behavior of these ships suggests a deliberate attempt to interact with the seabed infrastructure. Windward utilized a combination of ship-tracking data and satellite imagery to monitor the vessels. Some of these ships reportedly "went dark" by disabling their automatic identification system (AIS) transponders, a standard safety measure that normally broadcasts a vessel's location and identity. Windward stated that such patterns suggest the ships may be "mapping the cable routes, or placing charges or mines on them while dark."
The lack of commercial justification for these movements is a key indicator of potential sabotage. Windward highlighted in a blog post on October 26 that two sanctioned tankers linked to Iran spent days drifting directly over regional cable corridors without any commercial reason to stop. Furthermore, these two specific vessels were carrying no commercial cargo at the time of the observations.
Vessel tracking and AIS manipulation
The manipulation of AIS data represents a significant challenge for maritime security monitoring. When vessels switch off their transponders, they become much harder to track in real-time, creating "blind spots" in the maritime domain. For intelligence firms like Windward, reconciling satellite imagery with intermittent AIS data is necessary to identify potential gray-zone warfare tactics, such as the placement of mines or the mapping of sensitive infrastructure for future kinetic strikes.
The strategic importance of the Strait of Hormuz chokepoint
The Strait of Hormuz serves as a vital chokepoint for global digital connectivity, with several major undersea cables passing through its contested waters. Currently, six active cables cross the Strait, linking the Middle East to Europe, Africa, and Asia, while two additional cables are under construction in the region. The vulnerability of this corridor has significant implications for international data transmission and national security.
The impact of a disruption in this region would be felt globally, but certain nations face existential digital risks. The following table outlines the dependence of specific regional actors on these subsea connections:
| Category of Impact | Affected Entities / Regions | Details of Dependence |
|---|---|---|
| Direct National Dependence | Iraq, Kuwait, Bahrain, and Qatar | These four countries depend entirely on subsea connections through the Strait of Hormuz to link with the outside world. |
| Regional Data Traffic | India | One-third of India's westbound Internet traffic passes through the Persian Gulf and the Strait of Hormuz. |
| Global Infrastructure | Tech Consortiums (including Meta) | Owners of major corridors, such as the 2Africa cable, face direct operational risks. |
The 2Africa cable, which is currently under construction and owned by a consortium including the US-based company Meta, was one of the primary corridors visited by the drifting Iran-linked ships. The concentration of these cables in a single geographic bottleneck makes the region a high-value target for any actor seeking to exert leverage through digital disruption.
Iranian threats and the escalation of regional conflict
Iran's threats against subsea infrastructure have intensified as part of a broader pattern of retaliation against US and Israeli military actions. Since the outbreak of major war between the US/Israel and Iran in February 2026, the Iranian response has expanded beyond targeting military bases and aircraft to include attacks on commercial shipping, oil refineries, and energy infrastructure. Most recently, the focus has shifted toward US Big Tech infrastructure.
In May 2026, a spokesperson for Iran’s Islamic Revolutionary Guard Corps (IRGC) claimed that Iran would "impose fees on Internet cables" belonging to US technology companies and other owners. This rhetoric has since evolved into more direct military threats. On October 20, 2026, an IRGC spokesperson stated: "Seven major cables run through the Strait of Hormuz, supporting global Internet operations and commercial data transmission. We remind the enemy of this."
These warnings follow high-level political escalations. During a speech at the United Nations in New York on September 22, President Donald Trump warned he could "annihilate" Iran, following repeated threats to renew major US military strikes. In response, Iran has increased its use of drone strikes and attacks on commercial vessels, with October 2026 marking the highest frequency of ship attacks since the conflict began.
Operational consequences for the telecommunications industry
The ongoing conflict has already caused tangible damage to the global efforts to expand and maintain subsea connectivity. One of the most immediate consequences is the inability to perform essential maintenance or installation work in the region. The limited fleet of specialized cable-laying ships required for these tasks has been unable to enter the area safely since the war began.
This lack of access has directly impacted major infrastructure projects. For example, the expansion of the Meta-backed 2Africa cable has been forced to pause due to the security environment. The inability to deploy repair vessels means that any accidental damage to existing cables—whether caused by anchors, natural disasters, or sabotage—could lead to prolonged outages that are difficult to rectify.
In response to these persistent threats, both US technology companies and Gulf nations are attempting to mitigate risk through diversification. This involves accelerating efforts to develop alternative cable routes that bypass the Strait of Hormuz entirely. However, building new undersea infrastructure is a capital-intensive and time-consuming process, leaving a window of vulnerability while the current corridors remain under threat.
The rise of gray-zone warfare on subsea assets
The targeting of subsea cables is increasingly viewed as a form of "gray-zone" warfare—actions that fall below the threshold of open, large-scale military conflict but are designed to achieve strategic objectives through sabotage or coercion. This trend is not localized to the Middle East; threats to the Internet's undersea backbone have intensified globally, from the Baltic Sea to the Pacific Ocean. By targeting the physical layer of the internet, state actors can disrupt economies and communications without the immediate political fallout of a conventional missile strike.