The Polish Space Agency (POLSA) has been targeted by a cyberattack, prompting the agency to disconnect its network from the internet over the weekend in an effort to secure its systems. POLSA confirmed the breach on social media, stating that the incident had been reported to authorities, and an investigation was underway.
While the agency has not disclosed specific details about the nature of the attack, it is suspected that ransomware may have been involved, as disconnecting systems is a common response to such incidents. However, given Poland’s support for Ukraine amid the ongoing Russian-Ukrainian conflict, a nation-state attack cannot be ruled out.
Krzysztof Gawkowski, Poland’s Minister of Digital Affairs, stated that unauthorized access had been detected in POLSA’s IT infrastructure. He confirmed that systems had been secured, with the Polish Computer Security Incident Response Team (CSIRT NASK) and the Polish Military Computer Security Incident Response Team (CSIRT MON) assisting in recovery efforts.
Reports suggest that POLSA’s internal email systems may have been compromised, and the agency’s website remains offline. Authorities continue to investigate the source of the attack and plan to release further updates as the situation develops.