{"id":61053,"date":"2026-07-13T15:39:52","date_gmt":"2026-07-13T15:39:52","guid":{"rendered":"https:\/\/www.theregister.com\/a\/5270458"},"modified":"2026-07-13T15:39:52","modified_gmt":"2026-07-13T15:39:52","slug":"eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/","title":{"rendered":"EU and UK officially blame Russian spies for cyberattack on Poland&#8217;s power grid"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/image.theregister.com\/225878.jpg?imageId=225878&amp;x=0&amp;y=25.83&amp;cropw=100&amp;croph=71.67&amp;panox=0&amp;panoy=25.83&amp;panow=100&amp;panoh=71.67&amp;width=1200&amp;height=683\" class=\"ff-og-image-inserted\"><\/div>\n<p>The UK and EU are demanding urgent action from critical infrastructure organizations after formally attributing the December 2025 cyberattack on Poland&#8217;s power grid to Russia&#8217;s Federal Security Service.<\/p>\n<p>The Foreign, Commonwealth &amp; Development Office (FCDO) described the attack, carried out by the FSB&#8217;s Centre 16 division, as &#8220;another example of the Russian state&#8217;s irresponsible attempts to sow chaos across Europe.&#8221;<\/p>\n<p>Milosz Motyka, Poland&#8217;s energy minister, confirmed the attack on the country&#8217;s power grid in January. He said experts suspected that whoever was behind it attempted to disrupt communication between renewable hardware and power distribution operators.<\/p>\n<p>The attack was ultimately unsuccessful, but suspicion quickly fell on Russia.<\/p>\n<p>Attackers tried to deploy the destructive DynoWiper malware, a move typically associated with Russian state-backed operations. Mandiant previously tied the 2023 blackouts in Ukraine to Sandworm&#8217;s deployment of <a href=\"https:\/\/www.theregister.com\/security\/2023\/11\/09\/russias-sandworm-not-just-missile-strikes-behind-blackout\/786213\">CaddyWiper malware<\/a>, while the NCSC and its allies fingered the same military intelligence unit for the 2022 <a href=\"https:\/\/www.theregister.com\/security\/2022\/05\/10\/us-eu-formally-blame-russia-for-ukraine-data-wiper-attacks\/847301\">WhisperGate<\/a> wiper attacks at the start of Russia&#8217;s invasion.<\/p>\n<p>As <span class=\"italic m-italic \" data-lab-italic=\"italic\">The Register<\/span> reported at the time, the FCDO said the attack in Poland could have left half a million Poles without power in midwinter \u2013 a cyberattack with potentially lethal consequences.<\/p>\n<p>We asked the NCSC to provide more information about what evidence allowed it to attribute the Poland energy attack to Russia&#8217;s FSB, but it declined to comment on operational matters.<\/p>\n<h3>Time to act<\/h3>\n<p>The UK NCSC co-authored a technical advisory, published Monday, which highlights the latest developments in Russia&#8217;s tradecraft, urging those most at risk to apply the recommended mitigations.<\/p>\n<p>It said organizations in the following sectors are most at risk from Centre 16 cyberattacks: communications, defense industrial base, energy, financial services, government services and facilities (especially organizations at the state and local level), and healthcare and public health.<\/p>\n<p>The headline mitigation recommended by the intelligence agencies is to disable SNMPv1 and SNMPv2, opting instead for SNMPv3 with <span class=\"font-RobotoMono \" data-lab-fontface=\"RobotoMono\">authPriv<\/span>, which comes with strong authentication and data encryption, and to disable Cisco Smart Install on all devices.<\/p>\n<p>Centre 16&#8217;s common tactics involve scanning for devices that respond with SNMPv1\/2. These support default or easily guessed community strings, which are commonly abused to gain access to network devices such as routers \u2013 a technique the NCSC and others issued <a href=\"https:\/\/www.theregister.com\/security\/2026\/04\/07\/russias-apt28-behind-latest-wave-of-router-dns-attacks\/5228136\">separate warnings about in April<\/a>.&nbsp;<\/p>\n<p>Attackers can abuse SNMP access to obtain device configuration data and transfer it to a server under their control, which can later facilitate persistent access.<\/p>\n<p>Although SNMP scanning is the principal tactic described, the advisory also covers the exploitation of Cisco devices, including those with Smart Install enabled.<\/p>\n<div data-element-guid=\"afe083ca-6701-48e9-9bd8-f8827dd7fb42\" class=\"lab4 column articleList layout_vertical imageLayout_left small-12 large-4 small-abs-12 large-abs-4 abs_grid_4 desktop-floatLeft mobile-floatLeft grid-vas-start mobile-grid-vas-start\">\n<div class=\"content border_width_0 border_width_mobile_0 border-radius-48 border-radius-mobile_48\">\n<h2 class=\"article-list-title t19 font-RobotoCondensed\">MORE CONTEXT<\/h2>\n<\/p><\/div>\n<\/div>\n<p>Defenders examining the document will notice overlapping tactics, techniques, and procedures (TTPs) between Centre 16 and other Russia-aligned threat groups, the intelligence partners wrote.<\/p>\n<p>Jonathon Ellison, director of national resilience at the NCSC, said: &#8220;The NCSC, alongside our international partners, have repeatedly exposed the advanced tools and coordinated campaigns of Russian cyber actors who persistently seek to exploit any vulnerability they encounter.<\/p>\n<p>&#8220;Today&#8217;s joint advisory provides decisive, actionable directions from the global security community that network defenders should implement to protect against Russian Intelligence operations and secure the UK&#8217;s critical infrastructure.<\/p>\n<p>&#8220;I&#8217;d strongly encourage all organisations, especially those entrusted with UK critical networks, to adopt these recommended measures immediately, thereby reducing the risk of compromise.&#8221;<\/p>\n<h3>Fresh sanctions<\/h3>\n<p>The UK and EU have each added an array of Russian individuals and entities to their sanctions lists, including GRU officials, cybercriminals, and hacktivists.<\/p>\n<p>Members of pro-Kremlin outlet Rybar also makes an appearance, owing to its false narratives about Ukraine and alleged interference with European elections.<\/p>\n<p>The most high-profile designations concern Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko \u2013 three GRU leaders accused of orchestrating cyber and hybrid operations. They also allegedly worked with cybercriminals and a company called IMPULS with a view to recruit cybersecurity specialists from universities and academies across Russia.<\/p>\n<p>UK Foreign Secretary Yvette Cooper said: &#8220;These sanctions\u202fstrike at the core of the cybercriminal networks propping up the\u202fRussian state&#8217;s\u202faggression, and the UK and EU are sending a clear message that Russia cannot hide\u202fbehind its use of these\u202fproxy groups.\u202f&nbsp;<\/p>\n<p>&#8220;From directing criminals to\u202ftargeting businesses, and striking Poland&#8217;s energy grid in\u202fthe depths of winter, the\u202fRussian state\u202fis sinking to new\u202flows\u202fin its attempts\u202fto\u202fundermine European security.&nbsp;&nbsp;<\/p>\n<p>&#8220;Together with our partners, Britain will continue to call out this\u202fbehaviour, bolster our\u202fresilience\u202fand\u202frespond\u202fto\u202fthe hybrid threat\u202fposed by\u202fthe\u202fRussian state.\u202fThis will not deter us from supporting Ukraine.&#8221;<\/p>\n<p>Sanctions were also imposed against three individuals accused of being operators of Lumma Stealer, one of the major infostealer malware strains that play a significant role in the cybercrime economy.<\/p>\n<p>National Crime Agency data suggests that in the UK alone, at least 2,100 victims were identified as infected over six months. The UK confirmed that the Russian state has used Lumma Stealer to gather stolen credentials and launch cyberespionage operations against global targets.<\/p>\n<p>The 24 sanctions unveiled on Monday add to the 3,400-plus individuals and entities that have been designated for their roles in supporting Russia&#8217;s war efforts.<\/p>\n<h2>Don&#8217;t forget those cameras<\/h2>\n<p>The coordinated international warnings and sanctions come days after Dutch authorities issued their own alert about Russian espionage units targeting internet-connected cameras to gather intelligence about military logistics routes.<\/p>\n<p>Its separate <a href=\"https:\/\/www.aivd.nl\/documenten\/2026\/07\/10\/cyberadvies-russische-statelijke-actoren-compromitteren-ip-cameras-in-europa-voor-militaire-doeleinden\">advisory<\/a> warned that at least one Russian intelligence unit carries out operations targeting the Netherlands and other NATO members, using IP camera footage to track military logistics routes and the transport of materiel, and to map infrastructure such as bridges and roads.<\/p>\n<p>Dutch&nbsp;intelligence services added that Russia uses image recognition software to detect military vehicles, transport routes, shipments to Ukraine, and locations of Ukrainian soldiers.<\/p>\n<p>The advisory went on to say that Dutch intelligence suggests Russia&#8217;s use of compromised <a href=\"https:\/\/www.theregister.com\/security\/2026\/03\/04\/hundreds-of-iranian-hacking-attempts-hit-ip-cameras\/4336780\">IP cameras<\/a> and their imagery has systematically increased recently and become a normal part of its tradecraft.<\/p>\n<p>It said abusing default passwords was the most common way in which Russian spies were gaining access to the cameras, although the most recent security updates were rarely applied, opening up vulnerabilities to exploit when using guessable passwords doesn&#8217;t work. \u00ae<\/p>\n<p> <img decoding=\"async\" src=\"https:\/\/image.theregister.com\/?imageId=225878&#038;width=800\">READ MORE <a href=\"https:\/\/www.theregister.com\/security\/2026\/07\/13\/uk-eu-officially-pin-poland-energy-cyberattack-on-russia\/5270458\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> Sweeping sanctions and condemnation follow op that could have left half a million without power in the depths of winter READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":61054,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[307],"class_list":["post-61053","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register","tag-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>EU and UK officially blame Russian spies for cyberattack on Poland&#039;s power grid 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EU and UK officially blame Russian spies for cyberattack on Poland&#039;s power grid 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-13T15:39:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/image.theregister.com\/225878.jpg?imageId=225878&amp;x=0&amp;y=25.83&amp;cropw=100&amp;croph=71.67&amp;panox=0&amp;panoy=25.83&amp;panow=100&amp;panoh=71.67&amp;width=1200&amp;height=683\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"EU and UK officially blame Russian spies for cyberattack on Poland&#8217;s power grid\",\"datePublished\":\"2026-07-13T15:39:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/\"},\"wordCount\":1042,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg\",\"keywords\":[\"Security\"],\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/\",\"name\":\"EU and UK officially blame Russian spies for cyberattack on Poland's power grid 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg\",\"datePublished\":\"2026-07-13T15:39:52+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg\",\"width\":100,\"height\":66},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"EU and UK officially blame Russian spies for cyberattack on Poland&#8217;s power grid\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EU and UK officially blame Russian spies for cyberattack on Poland's power grid 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/","og_locale":"en_US","og_type":"article","og_title":"EU and UK officially blame Russian spies for cyberattack on Poland's power grid 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2026-07-13T15:39:52+00:00","og_image":[{"url":"https:\/\/image.theregister.com\/225878.jpg?imageId=225878&amp;x=0&amp;y=25.83&amp;cropw=100&amp;croph=71.67&amp;panox=0&amp;panoy=25.83&amp;panow=100&amp;panoh=71.67&amp;width=1200&amp;height=683","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"EU and UK officially blame Russian spies for cyberattack on Poland&#8217;s power grid","datePublished":"2026-07-13T15:39:52+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/"},"wordCount":1042,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg","keywords":["Security"],"articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/","url":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/","name":"EU and UK officially blame Russian spies for cyberattack on Poland's power grid 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg","datePublished":"2026-07-13T15:39:52+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2026\/07\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid.jpg","width":100,"height":66},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-polands-power-grid\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.threatshub.org\/blog\/tag\/security\/"},{"@type":"ListItem","position":3,"name":"EU and UK officially blame Russian spies for cyberattack on Poland&#8217;s power grid"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61053","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=61053"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/61053\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/61054"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=61053"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=61053"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=61053"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}