Polish Energy Infrastructure Hit by Major Cyberattacks
In late December, Poland experienced a series of cyberattacks on critical energy infrastructure, which Polish officials have linked to Russian intelligence structures. These incidents, targeting approximately 30 renewable energy facilities, an industrial plant, and a thermal power station, threatened to cut off heating for nearly half a million people during severe winter storms and freezing temperatures just before the New Year. Such attacks on civilian energy grids represent a significant escalation in hybrid warfare tactics.
Poland's Computer Emergency Response Team has described these as the most serious incidents in recent years. Polish Digitalization Minister Krzysztof Gawkowski stated that 'at the end of 2025, a cyberattack from Russia took place on a number of installations responsible for electricity.' He also pointed to the potential involvement of a hacking unit of Russia's FSB, specifically the entity known as Center 16.
Intent and Consequences of the Attacks
The goal of the cyberattacks was the complete destruction of data within the thermal power station's internal systems. However, cybersecurity defenses managed to block this data-wiping phase. Hacker groups associated with this service are tracked under the names Berserk Bear and Dragonfly.
Additionally, the Slovak cybersecurity company ESET published an analysis indicating the possible involvement of the Sandworm group, which is linked to Russian military intelligence.
Polish Prime Minister Donald Tusk reported that 'certain signs point to the possible involvement of Russian special services in preparing cyberattacks on the country's energy infrastructure.'
The Russian side, for its part, denies any involvement in cyberattacks in Europe, and the Russian embassy provided no comment on these events. The attacks on Poland's energy infrastructure have raised serious concerns about the security of energy facilities across the region.
These cyberattacks underscore the growing threat to energy security not only for Poland but for all of Europe, given the ongoing tensions with Russia. During winter and adverse weather conditions, such actions could have catastrophic consequences for the civilian population. Polish authorities are likely to enhance security measures and cooperation with international partners to protect critical infrastructure assets.