Cyber Incident Victim: Polish Parliament
Date:
Oct 2022
Location:
Poland
Summary
Cyberattacks targeted the Polish and Slovak parliaments, disrupting legislative operations. The Slovak parliament's entire computer network was paralyzed, halting a parliamentary session and disabling voting systems, computers, and phone lines, preventing lawmakers from processing bills. Polish authorities attributed their incident to a multi-directional attack originating from within Russia, suggesting potential retaliation for the Senate's recent declaration labeling the Russian government a terrorist regime. Technical teams in Slovakia worked to resolve the breach while the source remained unidentified.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 27, 2022, coordinated cyberattacks disrupted parliamentary operations in both Poland and Slovakia. The Polish Senate reported a multi-directional cyberattack originating partially from within the Russian Federation, occurring one day after the body passed a resolution declaring Russia's government a "terrorist regime." Simultaneously, Slovakia's National Council experienced severe network disruptions that paralyzed its voting systems during an active legislative session. Slovak Deputy Speaker Gabor Grendel confirmed the attack commenced around 11:00 AM local time (0900 GMT), forcing immediate suspension of parliamentary proceedings as technicians discovered the intrusion. All computer systems and telephone lines became nonfunctional, preventing lawmakers from voting on pending legislation. Parliamentary Speaker Boris Kollar acknowledged the technical team had not yet identified the attack's source during initial response efforts.
The Slovak parliament's entire computer network remained paralyzed following the intrusion, with no restoration timeline provided. Polish authorities explicitly connected their Senate's cyber incident to the preceding day's politically charged vote condemning Russia, though technical attribution details weren disclosed. Both legislatures experienced operational paralysis – Slovakia's session interruption prevented critical legislative functions, while Poland's systems disruption occurred amid heightened geopolitical tensions. Related regional cyber incidents referenced in source materials included Lithuania attributing attacks to Russia, Estonia blocking Russian hacker attempts, and Montenegro reporting massive Russian cyberattacks against government infrastructure, suggesting broader regional targeting of Eastern European governmental bodies during this period. Technical response teams in Slovakia focused on diagnosing the intrusion vector while maintaining public uncertainty regarding attribution specifics.