Poland Reports 270,000 Cyberattacks in 2025; Russian State Hackers Hit 30+ Renewable Energy Sites

Poland experienced 270,000 cyberattacks in 2025, a 2.5x increase over the prior year, according to a government assessment released March 24. The most significant operation targeted 30+ wind farms, solar installations, and combined heat and power plants via compromised FortiGate VPN devices. CERT Polska described the attacks as "purely destructive," deploying DynoWiper and LazyWiper malware. Attribution remains split: Polish authorities initially linked the campaign to FSB Center 16 (Static Tundra), while ESET and Dragos attribute it with moderate confidence to GRU-linked Sandworm.