According to cybersecurity company ESET, in December 2025, the Polish power grid was the target of a cyberattack attempt orchestrated by the Russian government-backed hacker collective known as 'Sandworm'. This group has a well-documented history of launching operations aimed at disrupting energy systems. On this occasion, their efforts were directed at two thermal power stations, as well as the communication networks connecting renewable energy sources, like wind power, to electricity distributors. Had the attack succeeded, it could have led to power outages affecting up to 500,000 households. ESET has managed to acquire a sample of the malicious software employed in the attack, dubbed 'DynoWiper', and has traced its origins back to the 'Sandworm' group. The Polish Prime Minister has assured the public that the nation's vital infrastructure was not significantly endangered, yet this event underscores the looming threats of cyberattacks at the national level and the challenges of safeguarding critical infrastructure against such threats in the context of ongoing geopolitical tensions.
