Lyce · Hybrid Watch

hw_046316ea1d8524b0

Poland’s state news agency likely hit by Russian cyberattack.

View this signal on the map

Poland’s Digital Affairs Minister, Krzysztof Gawkowski, announced that the Polish Press Agency (PAP) had “very likely” been victim of a cyberattack directed from the Russian side. The incident involved the appearance of a false article on the PAP newswire claiming the Prime Minister would mobilise 200,000 people to fight in Ukraine; the article was published twice, quickly removed and flagged as fake by authorities. Security services, including the Internal Security Agency (ABW), immediately launched an investigation and identified the path of unauthorised access within the PAP system. Though no proven data exfiltration or physical damage was publicly confirmed, the attack targeted a key state-media infrastructure and occurred ahead of the European Parliament elections. Geographically, the event centres on Warsaw and national media infrastructure, emphasising how hybrid threats extend into realms of public information and state-controlled networks. The dynamics reflect a hybrid-warfare pattern: Russian-linked actors using cyber means to sow confusion, undermine credibility of allied states and impose defensive burdens without direct kinetic engagement. The Polish government responded by announcing a large investment-increase in cybersecurity—more than 3 billion zlotys—to strengthen defences and explicitly citing Russia’s destabilisation strategy.

Occurrence
Publication
First observed
Review status
Not assessed
Countries
Poland
Updated

Attribution

Official

Facts

No facts

Sources

  1. Role
    Discovery lead
    Publication

    Poland’s Digital Affairs Minister, Krzysztof Gawkowski, announced that the Polish Press Agency (PAP) had “very likely” been victim of a cyberattack directed from the Russian side. The incident involved the appearance of a false article on the PAP newswire claiming the Prime Minister would mobilise 200,000 people to fight in Ukraine; the article was published twice, quickly removed and flagged as fake by authorities. Security services, including the Internal Security Agency (ABW), immediately launched an investigation and identified the path of unauthorised access within the PAP system. Though no proven data exfiltration or physical damage was publicly confirmed, the attack targeted a key state-media infrastructure and occurred ahead of the European Parliament elections. Geographically, the event centres on Warsaw and national media infrastructure, emphasising how hybrid threats extend into realms of public information and state-controlled networks. The dynamics reflect a hybrid-warfare pattern: Russian-linked actors using cyber means to sow confusion, undermine credibility of allied states and impose defensive burdens without direct kinetic engagement. The Polish government responded by announcing a large investment-increase in cybersecurity—more than 3 billion zlotys—to strengthen defences and explicitly citing Russia’s destabilisation strategy.