Poland’s Digital Affairs Minister Janusz Gawkowski stated that initial suspicions of Iranian involvement in the cyberattack on the National Centre for Nuclear Research are waning, with evidence now suggesting Russian origins.
Initial Iranian Link Under Scrutiny
Minister Gawkowski indicated that investigations into the attack are ongoing, and attributing blame within a day or two is impossible. Operational work continues at the site.
He acknowledged an initial assessment pointing to Iran, but now evidence suggests those connections are misleading, potentially deliberately staged to create that impression.
Growing Evidence of Russian Involvement
According to Gawkowski, the evidence is increasingly pointing towards Russia as the source of the cyberattack.
State Prioritizes Full Investigation
The Polish state is committed to a thorough investigation to understand the attack’s methods and prepare other institutions for similar threats, Gawkowski emphasized.
Public Transparency on Cyberattacks
The Deputy Prime Minister reiterated a decision to keep the public informed about cyberattacks to avoid perceptions of government secrecy, citing a recent attack in Myszków, Silesian Voivodeship as an example.
Authorities are working to maintain normal operations, and it remains unclear whether data was stolen, with investigations ongoing. The attacks are attributed to various adversary groups with differing objectives.
Daily Cyberattack Volume
Gawkowski highlighted the daily occurrence of cyberattacks, stating that a state of heightened readiness is triggered when an organization cannot defend itself and real problems arise.
Over two thousand incidents were reported in Poland yesterday, and nearly three thousand the day before, requiring operational response. Attacks target diverse entities, from large infrastructure to smaller organizations.



