Poland says cyber attacks on critical infrastructure rising, blames Russia

WARSAW – Poland’s critical infrastructure has been subject to a growing number of cyber attacks by Russia, whose military intelligence, has trebled its resources for such action against Poland in 2025, the country’s digital affairs minister told Reuters.

Of the 170,000 cyber incidents that have been identified in the first three quarters of 2025, a significant portion has been attributed to Russian actors, while other cases are financially motivated, involving theft or other forms of cybercrime, Mr Krzysztof Gawkowski said.

He said Poland is subject to between 2,000 and 4,000 incidents a day and that 700 to 1,000 are “taken up by us, meaning they posed a real threat or had the potential to cause serious problems”, he said.

Foreign adversaries are now expanding their focus beyond water and sewage systems to the energy sector, he said.

He did not give exact figures for Russian activity and could not comment on Russia’s methods in Poland’s cyberspace. The information on Russia’s increasing involvement had come from intelligence from Poland’s intelligence agencies.

Russia has consistently denied claims of such activity. The Russian embassy in Warsaw did not immediately return a request for comment.

Officials in Warsaw have said Poland, a staunch supporter of Ukraine, is Russia’s main target among Nato states and has accused the Kremlin of repeated efforts to undermine national security. 

“Russian activity is the most severe because it targets critical infrastructure essential to maintaining normal life,” Mr Gawkowski said. 

Along with the Russian drone attack on Sept 10, there was a correlated cyber attack on Poland, the largest since 2022, when the war broke out in Ukraine, he said. 

Although the government saw from the early hours of the night that the drone attack was coming from Russia, false claims that Ukraine sent the drones to start war, flooded Polish cyberspace, Mr Gawkowski said.

He added that to do this, bots that had remained dormant for months, even years, were reactivated. REUTERS