Russia Cyberattacks Polish Critical Infrastructure
Analysis based on 8 articles · First reported Jan 30, 2026 · Last updated Jan 30, 2026
The cyberattacks on Poland's critical infrastructure, attributed to Russia, introduce significant geopolitical risk and raise concerns about the security of energy and manufacturing sectors. This escalation in destructive cyber activity could lead to increased investment in cybersecurity measures across industries and nations.
Polish officials reported that Russia's Russia===Federal Security Service (FSB) was likely responsible for destructive cyberattacks on 30 Polish renewable energy facilities, a manufacturing firm, and a heat plant serving nearly 500,000 customers. The attacks, which occurred late last month, were described as 'purely destructive in nature' and coincided with low temperatures and snowstorms in Poland. While security software prevented the irreversible destruction of data, the incident is considered the worst of its kind in years. Independent analysis by cybersecurity firm ESET, however, linked the malware to a different Russian military intelligence hacking unit known as Sandworm. Experts from Google Threat Intelligence Group noted that if the FSB's 'Berserk Bear' group is indeed responsible, it signifies an escalation from long-term espionage to damaging actions, posing a more serious threat globally.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard