Archive · 31 Jan 2026
Poland Blames Russian FSB for Cyberattacks on Energy Infrastructure
Polish officials say that hackers from Russia's FSB spy agency attacked important energy places in Poland on December 29.
These attacks were meant to destroy data, but security software stopped them.
The attacks happened during a cold and snowy time, which made them even more serious.
Some experts think the hackers are part of a group called Berserk Bear or Dragonfly.
Another group, ESET, thinks the attacks might be from a different Russian hacking group called Sandworm.
These attacks are worrying because they show that the hackers might now want to cause damage, not just spy.
This makes people concerned about the safety of the upcoming Winter Olympics.
Polish officials blame Russian FSB hackers for cyberattacks on 30 renewable energy facilities, a manufacturing firm, and a heat plant on December 29, 2023.
The attacks coincided with low temperatures and snowstorms in Poland, exacerbating the impact.
The malware used in the attacks has overlaps with prior Russian cyber operations, but different groups are suspected by Polish officials and ESET.
The attacks were meant to irreversibly destroy data, but security software blocked the data destruction part.
Experts are concerned about the escalation from espionage to damaging actions, raising worries about the security of the upcoming Winter Olympics.
- Who
- Polish officials and cybersecurity experts
- What
- Cyberattacks on Polish energy infrastructure
- When
- December 29, 2023, during low temperatures and snowstorms
- Where
- Poland, targeting 30 renewable energy facilities, a manufacturing firm, and a heat plant
- Why
- To irreversibly destroy data, though the motive is not explicitly stated
- Date of Attacks
- December 29, 2023
- Targeted Facilities
- 30 renewable energy facilities, a manufacturing firm, and a heat plant
- Suspected Hackers
- Russian FSB's hacking group, Berserk Bear/Dragonfly
- Malware Used
- Malware with overlaps to prior Russian cyber operations
- Impact
- Attempted data destruction, blocked by security software
- Timing
- During low temperatures and snowstorms in Poland
- Winter Olympics Concern
- Potential threat to event security