Signal
Submitted
Feb 1, 2026, 00:14 UTC
Krakow cybercrime authorities detained a Russian suspect on November 16, 2025, for illegal hacking and unauthorized access to systems. The court approved three-month detention while investigations continue.
On November 16, 2025, Polish authorities detained a Russian citizen suspected of illegal cyber intrusions and hacking into teleinformation systems in Poland. The Krakow branch of the Central Bureau for Combating Cybercrime arrested the individual suspected of unauthorized access to an online shop system and its databases. The suspect had entered Poland in 2022, reportedly crossing the border illegally before later obtaining refugee status. After interrogation, the prosecutor requested a three-month pre-trial detention that was granted by the court. Ongoing investigations are examining whether the detainee participated in other cyberattacks targeting Polish companies and other EU states, as well as assessing the scope of damages sustained by victims. The prosecutor noted the case is developmental, indicating further inquiries.
Confidence: High
The event explicitly involves Polish authorities detaining a Russian citizen for unauthorized cyber operations targeting Polish and EU infrastructures, thus a clear aggressive hostile cyber event by a Russian actor. It also relates to border crossing and cyber activities within Poland, linking to nodes 1 and 2.
Source URL
https://lovekrakow.pl/rosjanin-zatrzymany-przez-krakowskie-cbzc
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "a185dfa1-ea5d-4229-82b6-aa1b288018e3",
"url": "https://lovekrakow.pl/rosjanin-zatrzymany-przez-krakowskie-cbzc",
"source": "admin_quick",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Poland",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"cybercrime",
"Russia",
"Poland",
"cyber intrusion",
"prosecution",
"CBZC",
"illegal border crossing",
"refugee status",
"cyberattacks",
"pre-trial detention"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Poland"
],
"where_text": "Cyberspace",
"headline": "Russian Citizen Detained by Krakow Central Bureau for Combating Cybercrime",
"description": "On November 16, 2025, Polish authorities detained a Russian citizen suspected of illegal cyber intrusions and hacking into teleinformation systems in Poland. The Krakow branch of the Central Bureau for Combating Cybercrime arrested the individual suspected of unauthorized access to an online shop system and its databases. The suspect had entered Poland in 2022, reportedly crossing the border illegally before later obtaining refugee status. After interrogation, the prosecutor requested a three-month pre-trial detention that was granted by the court. Ongoing investigations are examining whether the detainee participated in other cyberattacks targeting Polish companies and other EU states, as well as assessing the scope of damages sustained by victims. The prosecutor noted the case is developmental, indicating further inquiries.",
"summary_short": "Krakow cybercrime authorities detained a Russian suspect on November 16, 2025, for illegal hacking and unauthorized access to systems. The court approved three-month detention while investigations continue.",
"summary_extended": null,
"actor_primary": "Krakow branch of the Central Bureau for Combating Cybercrime (CBZC), Polish Prosecutor's Office",
"target_primary": null,
"location_text": "Lesser Poland Voivodeship",
"location_region": "Lesser Poland Voivodeship",
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event explicitly involves Polish authorities detaining a Russian citizen for unauthorized cyber operations targeting Polish and EU infrastructures, thus a clear aggressive hostile cyber event by a Russian actor. It also relates to border crossing and cyber activities within Poland, linking to nodes 1 and 2.",
"event_time_utc": "2025-11-26T11:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:42.343Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "medium",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Nov 26, 2025, 11:00 UTC
Event time confidence
unknown
Location
Lesser Poland Voivodeship
Region
Lesser Poland Voivodeship
Primary actor
Krakow branch of the Central Bureau for Combating Cybercrime (CBZC), Polish Prosecutor's Office
Country
Poland
Countries
Poland
Tags
cybercrime, Russia, Poland, cyber intrusion, prosecution, CBZC, illegal border crossing, refugee status, cyberattacks, pre-trial detention
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Krakow cybercrime authorities detained a Russian suspect on November 16, 2025, for illegal hacking and unauthorized access to systems. The court approved three-month detention while investigations continue.
On November 16, 2025, Polish authorities detained a Russian citizen suspected of illegal cyber intrusions and hacking into teleinformation systems in Poland. The Krakow branch of the Central Bureau for Combating Cybercrime arrested the individual suspected of unauthorized access to an online shop system and its databases. The suspect had entered Poland in 2022, reportedly crossing the border illegally before later obtaining refugee status. After interrogation, the prosecutor requested a three-month pre-trial detention that was granted by the court. Ongoing investigations are examining whether the detainee participated in other cyberattacks targeting Polish companies and other EU states, as well as assessing the scope of damages sustained by victims. The prosecutor noted the case is developmental, indicating further inquiries.
Confidence: High
The event explicitly involves Polish authorities detaining a Russian citizen for unauthorized cyber operations targeting Polish and EU infrastructures, thus a clear aggressive hostile cyber event by a Russian actor. It also relates to border crossing and cyber activities within Poland, linking to nodes 1 and 2.
Source URL
https://lovekrakow.pl/rosjanin-zatrzymany-przez-krakowskie-cbzc
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "a185dfa1-ea5d-4229-82b6-aa1b288018e3",
"url": "https://lovekrakow.pl/rosjanin-zatrzymany-przez-krakowskie-cbzc",
"source": "admin_quick",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Poland",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"cybercrime",
"Russia",
"Poland",
"cyber intrusion",
"prosecution",
"CBZC",
"illegal border crossing",
"refugee status",
"cyberattacks",
"pre-trial detention"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Poland"
],
"where_text": "Cyberspace",
"headline": "Russian Citizen Detained by Krakow Central Bureau for Combating Cybercrime",
"description": "On November 16, 2025, Polish authorities detained a Russian citizen suspected of illegal cyber intrusions and hacking into teleinformation systems in Poland. The Krakow branch of the Central Bureau for Combating Cybercrime arrested the individual suspected of unauthorized access to an online shop system and its databases. The suspect had entered Poland in 2022, reportedly crossing the border illegally before later obtaining refugee status. After interrogation, the prosecutor requested a three-month pre-trial detention that was granted by the court. Ongoing investigations are examining whether the detainee participated in other cyberattacks targeting Polish companies and other EU states, as well as assessing the scope of damages sustained by victims. The prosecutor noted the case is developmental, indicating further inquiries.",
"summary_short": "Krakow cybercrime authorities detained a Russian suspect on November 16, 2025, for illegal hacking and unauthorized access to systems. The court approved three-month detention while investigations continue.",
"summary_extended": null,
"actor_primary": "Krakow branch of the Central Bureau for Combating Cybercrime (CBZC), Polish Prosecutor's Office",
"target_primary": null,
"location_text": "Lesser Poland Voivodeship",
"location_region": "Lesser Poland Voivodeship",
"location_coordinates_lat": 51.919438,
"location_coordinates_lon": 19.145136,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The event explicitly involves Polish authorities detaining a Russian citizen for unauthorized cyber operations targeting Polish and EU infrastructures, thus a clear aggressive hostile cyber event by a Russian actor. It also relates to border crossing and cyber activities within Poland, linking to nodes 1 and 2.",
"event_time_utc": "2025-11-26T11:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:42.343Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "medium",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Nov 26, 2025, 11:00 UTC
Event time confidence
unknown
Location
Lesser Poland Voivodeship
Region
Lesser Poland Voivodeship
Primary actor
Krakow branch of the Central Bureau for Combating Cybercrime (CBZC), Polish Prosecutor's Office
Country
Poland
Countries
Poland
Tags
cybercrime, Russia, Poland, cyber intrusion, prosecution, CBZC, illegal border crossing, refugee status, cyberattacks, pre-trial detention
Nodes
Node 1: Borders, Node 2: 5th Column