Poland Foils Major Cyberattack on Energy Infrastructure

In late December 2025, Poland's energy infrastructure faced its most significant cyberattack in years, which targeted two combined heat and power plants and various wind farms. The attack, attributed to groups connected to Russian security services, was thwarted by Poland's intelligence and cybersecurity systems, preventing a potential blackout that could have affected up to half a million consumers during a harsh winter. Prime Minister Donald Tusk emphasized the effectiveness of Poland's defenses, stating that critical infrastructure remained uncompromised.

Euronews

Following the incident, Prime Minister Tusk called for the swift passage of new cybersecurity legislation to enhance protections against foreign interference. Deputy Prime Minister and Digital Affairs Minister Krzysztof Gawkowski described the attack as one of the most serious in recent years, highlighting the need for robust cybersecurity measures in light of increasing threats. He noted that Poland's defense systems functioned effectively during the attack, which was characterized as a direct act of sabotage by Russian actors.

Euronews

The attempted cyberattack on Poland's energy sector is part of a broader pattern of increasing cyber threats against critical infrastructure in Europe, particularly since the onset of Russia's full-scale invasion of Ukraine in February 2022. Polish Energy Minister Milosz Motyka reported that the command of cyberspace forces identified this attack as the strongest in years, with Russian military intelligence significantly increasing its cyber operations against Poland. The incident reflects a growing trend of hybrid warfare tactics employed by Russia, which includes cyberattacks, sabotage, and disinformation campaigns aimed at destabilizing Western nations.

ReutersEuronewsEuromaiden Press

Experts, including Dorota Kwasniewska from Defence24, stress the importance of not only technological advancements but also collaboration between public and private sectors to enhance cybersecurity. She noted that while Poland's systems performed well during the December attack, ongoing investments in safeguards and system modernization are essential to counter evolving threats. The need for a proactive approach to cybersecurity has become increasingly urgent as attacks grow more sophisticated.

Euronews

While Tusk and Gawkowski have pointed to Russian involvement in the cyberattack, definitive evidence identifying the perpetrators remains elusive. The Polish government has initiated an investigation into the incident, which has been referred to the Internal Security Agency. This inquiry aims to uncover the specifics of the attack and bolster future defenses against similar threats.

Euronews

• “I want to say that Poland defended itself against attempts at destabilization, and its infrastructure was never threatened for a moment.” — Donald Tusk, Prime Minister of Poland

The Straits Times

• “We were very close to a blackout,” — Krzysztof Gawkowski, Deputy Prime Minister and Digital Affairs Minister

Euromaiden Press

• “In response to growing threats, we need to prioritise the development of safeguards.” — Dorota Kwasniewska, Editor at Defence24

Euronews

This incident underscores the critical need for enhanced cybersecurity measures in Poland and highlights the ongoing challenges posed by foreign cyber threats.

Euronews