Lyce · Hybrid Watch

hw_3151043f4fa902d3

Poland dismantles cyber-sabotage group linked to Russia and Belarus.

Polish security services announced on 9 September 2024 that they had broken up an alleged cyber-sabotage cell with links to Russian and Belarusian intelligence, whose mission was to “paralyse” Poland’s political, military and economic infrastructure, according to ministerial statements. The group targeted local government agencies, state-owned companies with military/defence contracts, and the national anti-doping agency (POLADA), from which over 50,000 confidential athlete-files were leaked. Investigators discovered evidence of extortion, blackmail, encrypted communications and what was described as “de facto cyber-war” activities. The dynamics indicate Russia’s hybrid-warfare strategy: deploying proxy saboteurs, leveraging cyber means to weaken allied states’ resilience, and targeting civilian-industrial infrastructure that supports defence logistics. Poland’s digital-affairs minister said cyber-attacks had more than doubled since the previous year and numbered over 400,000 in the first half of 2024—a clear marker that the threat is broad, sustained and systemic.

Occurrence
2024-09-09
Publication
2024-09-08T22:00:00Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
PL
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2024-09-08T22:00:00Z

    Polish security services announced on 9 September 2024 that they had broken up an alleged cyber-sabotage cell with links to Russian and Belarusian intelligence, whose mission was to “paralyse” Poland’s political, military and economic infrastructure, according to ministerial statements. The group targeted local government agencies, state-owned companies with military/defence contracts, and the national anti-doping agency (POLADA), from which over 50,000 confidential athlete-files were leaked. Investigators discovered evidence of extortion, blackmail, encrypted communications and what was described as “de facto cyber-war” activities. The dynamics indicate Russia’s hybrid-warfare strategy: deploying proxy saboteurs, leveraging cyber means to weaken allied states’ resilience, and targeting civilian-industrial infrastructure that supports defence logistics. Poland’s digital-affairs minister said cyber-attacks had more than doubled since the previous year and numbered over 400,000 in the first half of 2024—a clear marker that the threat is broad, sustained and systemic.