Lyce · Hybrid Watch

hw_046316ea1d8524b0

Poland’s state news agency likely hit by Russian cyberattack.

Poland’s Digital Affairs Minister, Krzysztof Gawkowski, announced that the Polish Press Agency (PAP) had “very likely” been victim of a cyberattack directed from the Russian side. The incident involved the appearance of a false article on the PAP newswire claiming the Prime Minister would mobilise 200,000 people to fight in Ukraine; the article was published twice, quickly removed and flagged as fake by authorities. Security services, including the Internal Security Agency (ABW), immediately launched an investigation and identified the path of unauthorised access within the PAP system. Though no proven data exfiltration or physical damage was publicly confirmed, the attack targeted a key state-media infrastructure and occurred ahead of the European Parliament elections. Geographically, the event centres on Warsaw and national media infrastructure, emphasising how hybrid threats extend into realms of public information and state-controlled networks. The dynamics reflect a hybrid-warfare pattern: Russian-linked actors using cyber means to sow confusion, undermine credibility of allied states and impose defensive burdens without direct kinetic engagement. The Polish government responded by announcing a large investment-increase in cybersecurity—more than 3 billion zlotys—to strengthen defences and explicitly citing Russia’s destabilisation strategy.

Occurrence
2024-05-31
Publication
2024-05-31T20:55:21Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
PL
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2024-05-31T20:55:21Z

    Poland’s Digital Affairs Minister, Krzysztof Gawkowski, announced that the Polish Press Agency (PAP) had “very likely” been victim of a cyberattack directed from the Russian side. The incident involved the appearance of a false article on the PAP newswire claiming the Prime Minister would mobilise 200,000 people to fight in Ukraine; the article was published twice, quickly removed and flagged as fake by authorities. Security services, including the Internal Security Agency (ABW), immediately launched an investigation and identified the path of unauthorised access within the PAP system. Though no proven data exfiltration or physical damage was publicly confirmed, the attack targeted a key state-media infrastructure and occurred ahead of the European Parliament elections. Geographically, the event centres on Warsaw and national media infrastructure, emphasising how hybrid threats extend into realms of public information and state-controlled networks. The dynamics reflect a hybrid-warfare pattern: Russian-linked actors using cyber means to sow confusion, undermine credibility of allied states and impose defensive burdens without direct kinetic engagement. The Polish government responded by announcing a large investment-increase in cybersecurity—more than 3 billion zlotys—to strengthen defences and explicitly citing Russia’s destabilisation strategy.