Polska Agencja Kosmiczna

Summary

Polish cybersecurity services detected unauthorized access to the Polish Space Agency's IT infrastructure, prompting the minister for digitalisation to announce that the compromised systems had been secured and the agency's network disconnected from the Internet to protect data. Operational teams are working to identify the source of the breach while the agency confirms the incident to the press and notes ongoing analysis. The minister added that the activity is part of broader accusations that Moscow seeks to destabilize Poland due to its support for Ukraine, a claim denied by Russia.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Polish cybersecurity services detected unauthorized access to the information technology infrastructure of the Polish Space Agency (POLSA) on March 1, 2025, according to a statement by Minister for Digitalisation Krzysztof Gawkowski. The minister announced the detection on his social media account on platform X, stating that the systems under attack had been secured. He added that intensive operational activities were underway to identify the perpetrators behind the cyberattack. The announcement came amid repeated accusations by Warsaw that Moscow seeks to destabilise Poland due to its support for Ukraine, a claim denied by Russian officials. No further technical details about the nature of the intrusion were disclosed in the minister’s statement.

The Polish Space Agency confirmed to the Polish press agency PAP that a cybersecurity incident had occurred within its network. In response to the detection, the agency immediately disconnected its network from the Internet to secure data and prevent further unauthorized access. The agency indicated that the situation was being analysed to determine the scope and impact of the breach. While the agency did not specify which systems or data were affected, it emphasized that containment measures were in place. The incident remains under investigation by Polish cybersecurity authorities as they work to attribute the attack and assess any potential consequences.

Sources

Sources available to members: 1 source.