Incident Response

Hacking Attempt Reported at Poland’s Nuclear Research Center

Initial evidence indicates Iran may be behind the attack, but officials admitted it could be a false flag. 

Poland nuclear cyberattack

Poland’s national nuclear research center was recently targeted in a cyberattack that may have been conducted by Iranian hackers.

The National Centre for Nuclear Research (NCBJ) is Poland’s largest research institute focused on nuclear science and technology. It operates the country’s only nuclear research reactor, MARIA, and conducts research in nuclear and particle physics, reactor technology, radiopharmaceuticals for medical applications, and industrial and environmental applications.

NCBJ also supports Poland’s civilian nuclear power program, but it does not conduct any military-related activities. Poland does not have a nuclear weapons program.

[ Read: Iranian Hacker Attack on Stryker Disrupted Manufacturing and Shipping ]

In a statement issued last week, the NCBJ said its IT infrastructure was recently targeted by hackers, but the attempt was thwarted and systems have not been compromised.

“There was no disruption to any production, operational or research processes, and the MARIA reactor works safely and without interference, with full power,” reads a translation of a statement from Jakub Kupecki, the nuclear center’s director.

Advertisement. Scroll to continue reading.

Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski told news broadcaster TVN24+ that early indicators suggest Iran as the source of the hacking attempt. He cautioned, however, that the evidence might have been planted to mislead investigators and obscure the true origin.

The attack on Poland’s nuclear research center comes roughly two months after a threat actor targeted the country’s power grid.

The power grid attack, attributed to a Russian group, did not result in any electrical outages, but did lead to permanent damage to some industrial control systems (ICS).

Related: US Cyber Strategy Targets Adversaries, Critical Infrastructure, and Emerging Technologies

Related: 3 Threat Groups Started Targeting ICS/OT in 2025: Dragos

Related: US Braces for Cyberattacks After Bombing Iranian Nuclear Sites

Related Content

Nation-State

The attack was claimed by a hacktivist group, but evidence showed it used infrastructure linked to Iranian government threat actors.

Malware & Threats

Nimbus Manticore has continued its operations during and after the US military campaign against Iran.

ICS/OT

The hackers gained the ability to modify equipment operational parameters, creating a direct risk to the public water supply.

Nation-State

Likely perpetrated by MuddyWater, the attack combined social engineering, persistence, credential harvesting, and data theft.

Cyberwarfare

US service members received WhatsApp messages claiming they would be targeted with drones and missiles.

Malware & Threats

It targeted high-precision calculation software to tamper with results and packed a self-propagation mechanism.

ICS/OT

The US government has warned that Iran-linked hackers are manipulating PLCs and SCADA systems to cause disruption.

Cyberwarfare

Hackers vowed to revive its efforts against America when the time was right — demonstrating how digital warfare has become ingrained in military conflict.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version