Poland

Analyse

Primarily a target — 30 received· 0 initiated· 24 responses ·EU · NATO

This year to date, 30 new cyber operations involving Poland were added to the database: a 88% increase compared to the previous period. The number of operations is currently 8% above the long-term year-to-date average. The Intensity of cyber operations involving Poland over this year to date is rising to 3.5, compared with 3.4 in the same elapsed span of the previous year. This is above the all-time average for Poland of 2.6.

Maintained by EuRepoC research analysts · updated 16 Oct 2026

30received initiated0

For this year to date, this country appears chiefly as a target — 30 incidents directed at it, 0 it is linked to initiating.

Source: EuRepoC Global Database as of 16 Oct 2026.

01 / 02

Cyber activity

30 incidents · as target

As target 30 As actor 0

Incidents directed at Poland targets, and the responses they drew.

Cyber incident intensity

Mean3.7/15Moderate

Range 1.0–8.0

Drag the ends of the observed range to narrow intensities.

Minimum Maximum

29 coded incidents · This year to date

Database additions by monthincidents against Poland

Bar height shows incidents added during this year to date; select a bar to filter this interval; hover for average intensity.

Most-targeted sectorswhat gets hit

SectorIncidentsIntensityResponded

Government / ministries 10 2.8Moderate 3/10 Corporate Targets 9 3.4Moderate 2/9 Civil service / administration 6 3.2Moderate 3/6 Health 6 4.3Moderate 5/6 Energy 5 3.6Moderate 3/5 Telecommunications 5 2.8Moderate 2/5 International / supranational organization 5 3.8Moderate 1/5 Defence industry 4 4.0Moderate 2/4

Government / ministries is the most-targeted sector — 10 of 30 incidents, 3 answered.

By originwho is behind activity against it

Russia 7incidents avg 4.0 · Moderate China 4incidents avg 3.0 · Moderate Iran, Islamic Republic of 3incidents avg 3.7 · Moderate Korea, Democratic People's Republic of 1incident avg 4.0 · Moderate Russia, Belarus 1incident avg 3.0 · Moderate Belarus 1incident avg 3.0 · Moderate

02 / 02

Incidents received & responses

Fingerprint Poland ·Corporate Targets Unidentified Hacker Stole Customer Data of Major Invoicing Platform Fakturownia in Poland on 27 September 2026 27 Sep 2026

Incident · Low severity 27 Sep 2026

Fingerprint Poland ·Corporate Targets

Unidentified Hacker Stole Customer Data of Major Invoicing Platform Fakturownia in Poland on 27 September 2026

AUUSJPDE4 statesjoint WaterPlum Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026 Official policy 18 Sep 2026

Official policy 18 Sep 2026

AUUSJPDE4 states WaterPlum

Four International Partners Published Joint Security Advisory on North Korean Cyber Activities on 18 September 2026

Unknown Poland ·Health Unattributed Perpetrators Breached Medical Software Provider Qbusoft In Poland On 9 September 2026 9 Sep 2026

Incident · Unattributed 9 Sep 2026

Unknown Poland ·Health

Unattributed Perpetrators Breached Medical Software Provider Qbusoft In Poland On 9 September 2026

USFederal Bureau of Investigation Mabna Institute US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026 Criminal proceedings 18 Aug 2026

Criminal proceedings 18 Aug 2026

USFederal Bureau of Investigation Mabna Institute

US Department of Justice Charged 17 Iranians with Cyber Theft on behalf of the Islamic Revolutionary Guard Corps on 18 August 2026

(Russia) Poland ·Other Russian Or Belarussian Threat Actors Defaced Pilecki Institute's Website In Poland and Germany On 13-14 August 2026 13 Aug 2026

Incident · Low severity 13 Aug 2026

(Russia) Poland ·Other

Russian Or Belarussian Threat Actors Defaced Pilecki Institute's Website In Poland and Germany On 13-14 August 2026

Unknown NLFRALAD+4145 countries ·Corporate Targets +1 Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026 29 Jul 2026

Incident · Unattributed 29 Jul 2026

Unknown NLFRALAD+4145 countries ·Corporate Targets +1

Unknown Threat Actors Compromised Customer Data Of French Company CEVA Logistics Between 29 July and 1 August 2026

CACZFRNZ+1216 statesjoint LAUNDRY BEAR (Russian Federation) International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026 Technical disclosure 23 Jul 2026

Technical disclosure 23 Jul 2026

CACZFRNZ+1216 states LAUNDRY BEAR (Russian Federation)

International Partners Issued Joint Cybersecurity Advisory Warning of Russian State-Supported Laundry Bear's Phishing Campaign Targeting Zimbra Collaboration Suite Users on 23 July 2026

Laundry Bear USATBEBG+2428 countries ·Government / ministries +4 Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026 22 Jul 2026

Incident · Low severity 22 Jul 2026

Laundry Bear USATBEBG+2428 countries ·Government / ministries +4

Russia-Aligned Threat Actor TA488 aka LAUNDRY BEAR Stole Emails and Account Credentials from US and European Government Entities Since 22 July 2026

Showing the 8 most recent of 54 Open all in advanced search