In December 2023, a Russian-linked cyberattack using DynoWiper malware targeted Poland's energy grid IT systems, aiming to cause outages and disruption but was thwarted before damage.

In late December 2023, Poland faced a significant cyberattack against its energy infrastructure involving a wiper malware called DynoWiper, aimed at erasing critical IT system files to disrupt power supply and recovery capabilities. The malware focused on IT systems of power generation and distribution sites, including heat-and-power plants and renewable energy sources, but spared the operational technology systems that control the grid. The attack, attributed to the Russian GRU-linked Sandworm group with medium confidence by European security firm ESET, was foiled without any service disruption or blackout. Polish Prime Minister Donald Tusk affirmed the successful defense and linked the attack to Russian intelligence services. The event marks Poland's first disruptive cyberattack on its energy sector with destructive intent, resembling prior attacks Sandworm launched against Ukraine’s energy infrastructure a decade ago. Officials have not detailed the attack vectors but emphasized the seriousness and unprecedented nature of this attempted attack.