- Category
- World
Russia Targets Poland’s Water Infrastructure Following Cyberattacks on Energy Grid, Intelligence Warns
- Authors
![Photo of Dariia Mykhailenko]( "Photo of Dariia Mykhailenko")
Poland’s domestic intelligence service has reported a series of cyberattacks targeting water treatment infrastructure across the country in 2025, raising concerns over potential risks to critical public utilities.
In a newly released public report, the Internal Security Agency (ABW) said that water treatment facilities in the towns of Jabłonna Lacka, Szczytno, Małdyty, Tolkmicko, and Sierakowo were breached by unknown attackers.
We bring you stories from the ground. Your support keeps our team in the field.
According to the agency, in several cases the intruders gained access to industrial control systems used to manage and operate the facilities. This access, the report warned, would have allowed them to modify technical parameters of key equipment, creating what it described as a “direct risk” to the continuity of water supply services.
The ABW did not publicly attribute responsibility for the incidents to any specific actor or state. However, it noted a broader increase in hostile cyber activity directed at Poland during 2024 and 2025.
The report stated that this activity placed “particular emphasis on the special services of the Russian Federation,” highlighting concerns over sustained cyber pressure on critical infrastructure across the country.
Separately, Polish officials said that in December 2025 Russia launched a series of cyberattacks against Poland’s energy infrastructure, bringing the country close to a nationwide blackout.
Deputy Prime Minister and Minister for Digital Affairs Krzysztof Gawkowski told RMF24 that the incident marked the most severe cyberattack ever recorded against Poland’s energy sector.
“This was the most severe attack on our energy infrastructure, aimed at cutting off electricity to citizens at the end of December,” he said.
Gawkowski added that the attacks coincided with adverse weather conditions, which further complicated efforts to stabilize the energy system. He characterized the incident as an act of deliberate sabotage.
“Everything indicates we were dealing with Russian sabotage, which must be called by its real name—an attempt to destabilize Poland,” he said. The minister also warned that the country came dangerously close to widespread power outages, describing the cyber operations as “digital tanks” crossing the border.
Moreover, in 2025, Poland emerged as a primary target of Russian cyber operations, as Moscow significantly expanded the capabilities of its military intelligence services directed at the country, reportedly tripling the resources allocated to such activities over the year.
Deputy Prime Minister and Minister for Digitalization Krzysztof Gawkowski said that Poland has become one of the primary cyber targets for Russia among NATO member states.
Gawkowski added that of the 170,000 cyber incidents recorded since the beginning of the year, a significant share has been attributed to Russian-linked actors, while the remainder is believed to be driven by financially motivated cybercrime.
Discuss this article:
-4a56a6b482ec132402c16ef6fcabf9a2.png)
-c439b7bd9030ecf9d5a4287dc361ba31.jpg "Photo of Katherina Popilnichenko")
-72b63a4e0c8c475ad81fe3eed3f63729.jpeg "Photo of Cyril Barabaltchouk")