Poland Reports 270,000 Cyberattacks in 2025, 2.5x Prior Year; Russian FSB-Linked Group Hit Energy Sector

An AP wire story reported Poland experienced 270,000 cyberattacks in 2025, a 2.5x increase over the prior year, including a coordinated assault on more than 30 wind and solar farms, a combined heat and power plant serving nearly half a million customers, and a manufacturing facility. CERT Polska attributed the December 2025 energy sector attacks to infrastructure overlapping with the 'Dragonfly' cluster (also tracked as Static Tundra, Berserk Bear, and Ghost Blizzard), which the FBI has linked to FSB Center 16. Attackers gained initial access through exposed FortiGate VPN devices and conducted purely destructive actions on industrial control systems, corrupting firmware, deleting operating files, and resetting controllers to factory settings.