Story perspectives

Poland Thwarts Russian Cyberattack, Strengthens Cybersecurity Measures

1/29/2026

Summary

Story summary

In December 2025, a failed cyberattack on Poland's power grid, attributed to the Russian Sandworm group, used DynoWiper malware.
Prime Minister Donald Tusk confirmed Polish systems blocked attempts to disrupt energy facilities, including renewable sources.
ESET noted the attack coincided with the tenth anniversary of Sandworm's previous assault on Ukraine's grid.
Poland will pass cybersecurity legislation and will work with NATO to deter threats along its border with Belarus.

History

Historical Context

On December 23, 2015, a cyberattack by the Russian group Sandworm disrupted Ukraine's power grid, leaving approximately 230,000 residents without electricity for up to six hours. This incident marked the first successful cyberattack on a power grid and highlighted vulnerabilities amid the ongoing Russo-Ukrainian War. The attack's implications resonate today as Poland enhances cybersecurity measures in response to similar threats.

1 of 2

Story summary

In December 2025, a failed cyberattack on Poland's power grid, attributed to the Russian Sandworm group, used DynoWiper malware.
Prime Minister Donald Tusk confirmed Polish systems blocked attempts to disrupt energy facilities, including renewable sources.
ESET noted the attack coincided with the tenth anniversary of Sandworm's previous assault on Ukraine's grid.
Poland will pass cybersecurity legislation and will work with NATO to deter threats along its border with Belarus.

1 / 2