Poland faces surge in DDoS attacks and critical infrastructure vulnerabilities

Poland is facing a significant surge in cyber threats, targeting both local telecommunications providers and critical national infrastructure. Local Internet Service Providers (ISPs) have reported unprecedented Distributed Denial of Service (DDoS) attacks. One provider, Netus Internet, noted traffic reaching 260 Gb/s and over 80 million packets per second, a scale previously unseen for small and medium-sized operators. The Fixmap group, representing 25 local operators, confirmed that these sophisticated, multi-vector attacks are increasingly targeting the providers themselves rather than just their clients.

Simultaneously, an audit by the Supreme Audit Office (NIK) has revealed critical vulnerabilities in Poland's essential services, including energy, water, and transport. The audit found that most inspected operators failed to ensure the integrity and availability of their data and frequently ignored security alerts. In 2025, national Computer Security Incident Response Teams (CSIRT) handled nearly 273,000 incidents, a 144.4% increase from the previous year. The report highlighted the severe risks of such vulnerabilities, noting that attacks on water treatment plants or power grids could directly threaten public health and safety.