Poland’s Digital Affairs Minister reports that cybersecurity teams halted a cyberattack on the national ePUAP online services platform, calling in the Internal Security Agency to investigate. The incident follows earlier cyber breaches against Polish public institutions and occurs amid sustained targeting of Poland by Russian state-linked hacking groups.

Cyber & Information WarfareCyber AttacksAttacks on critical infrastructure (energy, transport, hospitals)

Aggressor

Summary

TVP World reports that Polish authorities have stopped a cyberattack targeting ePUAP, a national online platform used by citizens to communicate with government offices. The article, in the Society section under the headline "Cyberattack hits Polish government's online services platform," states that Digital Affairs Minister Krzysztof Gawkowski wrote on X on Tuesday evening that cybersecurity teams had taken immediate action to contain the attack and maintain the stability of the ePUAP system. He is quoted saying that the infrastructure of the Central Informatics Center is secure and that the Internal Security Agency has been brought in to fully investigate the incident in accordance with established procedures. The ePUAP platform allows people across Poland to submit official documents and applications online and sign them electronically using Trusted Profile, a government-backed digital identity system. The report notes that this incident follows a series of cyberattacks on Polish public institutions, including a breach of a Culture Ministry digital system in October and a ransomware attack on a public hospital in the northwestern city of Szczecin in March. The piece further cites US tech giant Microsoft as stating that Poland was among the ten countries most frequently targeted by Russian state-linked hacking groups between July 2025 and June 2026. Visual elements include a prominent image of a smartphone displaying the ePUAP logo against a blurred Polish flag background, with a caption emphasizing that the platform allows Poles to sign official documents online and sign them electronically. The byline attributes the story to author Rawa? Salmon with editing by Piotr Kozierski, and a timestamp shows 19.11.2026, 12:33. Social sharing options (Facebook, X, e-mail, copy link), tags (#cybersecurity, #Poland), and related articles on other Russian-linked cyber and hybrid activities in the region appear in sidebars and lower sections of the page.

Classification

Confidence: High

The article centers on a concrete malicious cyber operation against Poland’s ePUAP government services platform, framed as part of a broader series of digital attacks on Polish public institutions and linked by Microsoft’s reporting to sustained targeting by Russian state-linked hacking groups. This is a hostile cyber activity against critical government digital infrastructure, fitting the Cyber & Information Warfare / Cyber Attacks taxonomy. Defensive elements (containment actions and invest...

Source URL

https://tvpworld.com/96413534/poland-cyberattack-on-epuap-official-online-services-platform

Open source

Provenance

Publisher: extension
Submitted: Nov 11, 2026, 20:34 UTC
Last updated: Nov 11, 2026, 23:41 UTC
Event time: Nov 11, 2026, 20:34 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "de974032-7672-4195-9cf9-9b436441aba7",
  "url": "https://tvpworld.com/96413534/poland-cyberattack-on-epuap-official-online-services-platform",
  "source": "extension",
  "status": "processed",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Poland",
  "source_reliability": "B",
  "info_credibility": "2",
  "tags": [
    "Poland",
    "ePUAP",
    "Trusted Profile",
    "Central Informatics Center",
    "Internal Security Agency",
    "Digital Affairs Minister Krzysztof Gawkowski",
    "cyberattacks",
    "government digital services",
    "ransomware",
    "Culture Ministry breach",
    "Szczecin hospital cyberattack",
    "Russian state-linked hackers",
    "Microsoft reporting",
    "public sector cyber defense",
    "critical digital infrastructure"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "TVP World reports that Polish authorities have stopped a cyberattack targeting ePUAP, a national online platform used by citizens to communicate with government offices. The article, in the Society section under the headline \"Cyberattack hits Polish government's online services platform,\" states that Digital Affairs Minister Krzysztof Gawkowski wrote on X on Tuesday evening that cybersecurity teams had taken immediate action to contain the attack and maintain the stability of the ePUAP system. He is quoted saying that the infrastructure of the Central Informatics Center is secure and that the Internal Security Agency has been brought in to fully investigate the incident in accordance with established procedures. The ePUAP platform allows people across Poland to submit official documents and applications online and sign them electronically using Trusted Profile, a government-backed digital identity system. The report notes that this incident follows a series of cyberattacks on Polish public institutions, including a breach of a Culture Ministry digital system in October and a ransomware attack on a public hospital in the northwestern city of Szczecin in March. The piece further cites US tech giant Microsoft as stating that Poland was among the ten countries most frequently targeted by Russian state-linked hacking groups between July 2025 and June 2026. Visual elements include a prominent image of a smartphone displaying the ePUAP logo against a blurred Polish flag background, with a caption emphasizing that the platform allows Poles to sign official documents online and sign them electronically. The byline attributes the story to author Rawa? Salmon with editing by Piotr Kozierski, and a timestamp shows 19.11.2026, 12:33. Social sharing options (Facebook, X, e-mail, copy link), tags (#cybersecurity, #Poland), and related articles on other Russian-linked cyber and hybrid activities in the region appear in sidebars and lower sections of the page.",
  "summary_short": "Poland’s Digital Affairs Minister reports that cybersecurity teams halted a cyberattack on the national ePUAP online services platform, calling in the Internal Security Agency to investigate. The incident follows earlier cyber breaches against Polish public institutions and occurs amid sustained targeting of Poland by Russian state-linked hacking groups.",
  "summary_extended": null,
  "actor_primary": "Russian state-linked hacking groups",
  "target_primary": null,
  "location_text": "ePUAP national online services platform, Poland",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article centers on a concrete malicious cyber operation against Poland’s ePUAP government services platform, framed as part of a broader series of digital attacks on Polish public institutions and linked by Microsoft’s reporting to sustained targeting by Russian state-linked hacking groups. This is a hostile cyber activity against critical government digital infrastructure, fitting the Cyber & Information Warfare / Cyber Attacks taxonomy. Defensive elements (containment actions and invest...",
  "event_time_utc": "2026-11-11T20:34:00.528Z",
  "end_time_utc": "2026-11-17T22:00:00.000Z",
  "event_time_confidence": "pm6h",
  "created_at": "2026-11-11T20:34:00.528Z",
  "updated_at": "2026-11-11T23:41:17.961Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_6h",
  "severity_band": "minor",
  "attribution_confidence_band": "low",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: MinorAttribution: LowSingle sourceTime: Within 6 hoursLocation: Regional

Source reliability

Info credibility

Event time

Nov 11, 2026, 20:34 UTC

End time

Nov 17, 2026, 22:00 UTC

Event time confidence

pm6h

Location

ePUAP national online services platform, Poland

Primary actor

Russian state-linked hacking groups

Country

Poland

Tags

Poland, ePUAP, Trusted Profile, Central Informatics Center, Internal Security Agency, Digital Affairs Minister Krzysztof Gawkowski, cyberattacks, government digital services, ransomware, Culture Ministry breach, Szczecin hospital cyberattack, Russian state-linked hackers, Microsoft reporting, public sector cyber defense, critical digital infrastructure

Loading signal...

{ "id": "de974032-7672-4195-9cf9-9b436441aba7", "url": "https://tvpworld.com/96413534/poland-cyberattack-on-epuap-official-online-services-platform", "source": "extension", "status": "processed", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)", "country": "Poland", "source_reliability": "B", "info_credibility": "2", "tags": [ "Poland", "ePUAP", "Trusted Profile", "Central Informatics Center", "Internal Security Agency", "Digital Affairs Minister Krzysztof Gawkowski", "cyberattacks", "government digital services", "ransomware", "Culture Ministry breach", "Szczecin hospital cyberattack", "Russian state-linked hackers", "Microsoft reporting", "public sector cyber defense", "critical digital infrastructure" ], "nodes": [], "countries": [], "where_text": "Cyberspace", "headline": null, "description": "TVP World reports that Polish authorities have stopped a cyberattack targeting ePUAP, a national online platform used by citizens to communicate with government offices. The article, in the Society section under the headline \"Cyberattack hits Polish government's online services platform,\" states that Digital Affairs Minister Krzysztof Gawkowski wrote on X on Tuesday evening that cybersecurity teams had taken immediate action to contain the attack and maintain the stability of the ePUAP system. He is quoted saying that the infrastructure of the Central Informatics Center is secure and that the Internal Security Agency has been brought in to fully investigate the incident in accordance with established procedures. The ePUAP platform allows people across Poland to submit official documents and applications online and sign them electronically using Trusted Profile, a government-backed digital identity system. The report notes that this incident follows a series of cyberattacks on Polish public institutions, including a breach of a Culture Ministry digital system in October and a ransomware attack on a public hospital in the northwestern city of Szczecin in March. The piece further cites US tech giant Microsoft as stating that Poland was among the ten countries most frequently targeted by Russian state-linked hacking groups between July 2025 and June 2026. Visual elements include a prominent image of a smartphone displaying the ePUAP logo against a blurred Polish flag background, with a caption emphasizing that the platform allows Poles to sign official documents online and sign them electronically. The byline attributes the story to author Rawa? Salmon with editing by Piotr Kozierski, and a timestamp shows 19.11.2026, 12:33. Social sharing options (Facebook, X, e-mail, copy link), tags (#cybersecurity, #Poland), and related articles on other Russian-linked cyber and hybrid activities in the region appear in sidebars and lower sections of the page.", "summary_short": "Poland’s Digital Affairs Minister reports that cybersecurity teams halted a cyberattack on the national ePUAP online services platform, calling in the Internal Security Agency to investigate. The incident follows earlier cyber breaches against Polish public institutions and occurs amid sustained targeting of Poland by Russian state-linked hacking groups.", "summary_extended": null, "actor_primary": "Russian state-linked hacking groups", "target_primary": null, "location_text": "ePUAP national online services platform, Poland", "location_region": null, "location_coordinates_lat": 51.919438, "location_coordinates_lon": 19.145136, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article centers on a concrete malicious cyber operation against Poland’s ePUAP government services platform, framed as part of a broader series of digital attacks on Polish public institutions and linked by Microsoft’s reporting to sustained targeting by Russian state-linked hacking groups. This is a hostile cyber activity against critical government digital infrastructure, fitting the Cyber & Information Warfare / Cyber Attacks taxonomy. Defensive elements (containment actions and invest...", "event_time_utc": "2026-11-11T20:34:00.528Z", "end_time_utc": "2026-11-17T22:00:00.000Z", "event_time_confidence": "pm6h", "created_at": "2026-11-11T20:34:00.528Z", "updated_at": "2026-11-11T23:41:17.961Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_6h", "severity_band": "minor", "attribution_confidence_band": "low", "attribution_basis": "single_source" }