In June 2021, the Automatic Identification System (AIS) signals of two Norwegian Navy corvettes were spoofed by malicious actors, falsely indicating that the vessels had left Gdynia, Poland, and intruded into Russian territorial waters near Kaliningrad. This deceptive cyber operation created a high-risk geopolitical incident, as the falsified data could have been misinterpreted as an unauthorized military incursion, potentially escalating tensions between NATO and Russia. The attack exploited vulnerabilities in maritime navigation systems, which rely on AIS for real-time vessel tracking. By manipulating these signals, the perpetrators demonstrated the ability to disrupt critical military communications, undermining trust in navigational data and raising concerns about cyber threats to national security. While no physical damage or direct casualties occurred, the incident highlighted the potential for cyber operations to provoke international conflicts, particularly in strategically sensitive regions like the Baltic Sea. The Norwegian Navy had to investigate and mitigate the deception, reinforcing cybersecurity protocols for AIS and related systems. The attack served as a warning about the growing intersection of cyber warfare and traditional military operations, where false-flag operations could trigger unintended escalations. The long-term impact includes increased scrutiny of maritime cybersecurity and the need for resilient authentication mechanisms to prevent similar spoofing attacks in the future.