Russian government hackers blamed for major recent cyberattack on Polish energy grid

By Maggie Miller | 01/26/2026 07:13 AM EST

The Sandworm hacking group was previously tied to an attack 10 years earlier on the Ukrainian power grid that left thousands in the dark for hours.

The Russian flag flies over the Russian Embassy in Berlin, Germany.

The Russian flag flies over the Russian Embassy on Jan. 11 in Berlin, Germany. Sean Gallup/Getty Images

A hacking group tied to Russian intelligence was allegedly behind a large-scale attempted cyberattack in December on the Polish power grid, cybersecurity company ESET concluded in a report published Friday.

The incident — which according to Polish authorities was unsuccessful and did not disrupt energy access in the country — was one of the largest cyberattacks on the nation’s critical infrastructure in years, and would mark a major instance of Russia targeting a NATO state.

According to the report from ESET, Russian hacking group Sandworm — which is connected to the Russian GRU intelligence agency — was responsible for the cyberattack. ESET researchers found that the attack occurred around the 10th anniversary of a similar, but successful, cyberattack by Sandworm in 2015 on the Ukrainian power grid, which left hundreds of thousands of Ukrainians in the dark for hours.

Advertisement

The researchers noted that attackers used a type of malware designed for destructive purposes, but stressed that “we’re not aware of any successful disruption occurring as a result of this attack.”

GET FULL ACCESS