Poland’s intelligence service has revealed that hackers breached multiple water treatment plants across the country, warning that the attackers may have gained the ability to manipulate industrial control systems responsible for maintaining the safety of public water supplies. The incidents are part of what Polish authorities describe as an escalating campaign of cyber sabotage linked to hostile foreign operations targeting critical infrastructure throughout Europe.
According to a newly released report from Poland’s Internal Security Agency, hackers infiltrated five separate water treatment facilities over the past two years. Officials warned that the breaches created the possibility for attackers to seize control of industrial equipment used to regulate water purification systems and chemical processes. In the worst-case scenario, authorities said, the attacks could have endangered public health by tampering with the safety of drinking water.
The intelligence agency described sabotage activities inspired and organized by Russian intelligence services as one of the most immediate threats facing Poland. The report stated that hostile cyber and espionage operations had targeted military installations, transportation systems, power infrastructure, and civilian facilities. Polish officials warned that some attacks had the potential to result in fatalities if left undetected.
While the report stopped short of directly attributing the water treatment attacks to Russian operatives, Poland has increasingly accused Moscow-linked hackers of attempting to destabilize the country through cyberwarfare. Recent incidents have included attempted attacks on Poland’s energy grid and other strategic infrastructure systems, highlighting growing concerns over the vulnerability of essential public services to digital sabotage.
The warning carries significance far beyond Poland’s borders, as similar threats have already emerged in the United States. In 2021, a hacker gained access to a water treatment facility in Oldsmar, Florida and attempted to dangerously increase levels of sodium hydroxide, a corrosive chemical used in water treatment. Although plant operators intervened before damage occurred, the breach exposed major weaknesses in the cybersecurity defenses protecting public utilities.
Since then, U.S. federal agencies including the FBI and the Cybersecurity and Infrastructure Security Agency have repeatedly warned that water systems remain attractive targets for foreign cyber groups. Many smaller utility operators continue to rely on outdated technology and weak security protections, making them vulnerable to intrusions capable of disrupting essential services or causing public harm.
The threat has intensified in recent months as Western intelligence agencies report growing activity from Iranian-backed and Russian-linked hacking groups targeting industrial control systems. Last month, the FBI, NSA, and several other federal agencies issued a joint warning that hackers are actively targeting programmable logic controllers — the industrial computers that operate water plants, power stations, and energy infrastructure throughout the United States.
One Iranian-linked hacking group known as CyberAv3ngers previously breached control systems at multiple U.S. water treatment facilities in Pennsylvania in 2023. Federal investigators linked those attacks to rising geopolitical tensions in the Middle East and warned that similar campaigns could spread to other sectors of critical infrastructure.
Security experts say the attacks on Poland reflect a broader strategy increasingly used by hostile governments to weaken adversaries without engaging in direct military confrontation. By targeting water systems, electricity networks, transportation infrastructure, and digital communications, attackers can create fear, economic disruption, and political instability while remaining below the threshold of open warfare.
Polish intelligence officials argue that cyberattacks have become one of the Kremlin’s most effective tools for destabilizing Western countries and undermining public confidence in state institutions. As tensions between Russia and NATO continue to rise, authorities across Europe and North America are now racing to strengthen the defenses of critical infrastructure systems that millions of citizens depend on every day.
