Poland’s Nuclear Research Centre Says Cyberattack Was Blocked Before Systems Were Compromised
Summary
Poland’s NCBJ says it detected and blocked an attack on its IT infrastructure before systems were compromised. The MARIA reactor was unaffected; an investigation is underway, while possible Iranian involvement remains unconfirmed.
Key points
- NCBJ says its security systems detected and blocked an attack on its IT infrastructure before any systems were compromised.
- The institute says its response procedures and IT team secured the targeted systems.
- NCBJ reports the MARIA research reactor was unaffected and continues operating at full power.
- Authorities have been notified, an investigation is underway, and internal security teams are on high alert.
- Reuters reported indicators that may point to Iranian involvement, but investigators cautioned they could be false flags.
- The article separately notes prior APT44 (Sandworm) attacks on Polish energy infrastructure; it does not attribute the NCBJ incident to APT44.
Article Details
- Victim Organization
- Poland’s National Centre for Nuclear Research (NCBJ)
- Incident Type
- Attempted cyberattack targeting IT infrastructure; detected and blocked before systems were compromised.
- Operational Impact
- NCBJ reported no impact: targeted systems were secured, system integrity was not compromised, and the MARIA research reactor continued operating safely at full power.
- Claim Status
- confirmed
People
Threat Actors
Countries
IranAlthough the agency did not attribute the attack to any specific threat groups or nations, Reuters reported that Polish authorities found indicators that Iran may be behind the cyberattack.PolandPoland’s National Centre for Nuclear Research (NCBJ) says its security systems detected and blocked a cyberattack on its IT infrastructure before any systems were compromised.