Signal
Submitted
Nov 6, 2026, 20:50 UTC
On 12 March 2026, Polish authorities disclosed an unsuccessful, likely Iran-linked cyberattack on Poland's National Centre for Nuclear Research; officials said system integrity was preserved but warned the apparent Iranian origin might be misdirection.
On 12 March 2026, Polish authorities reported an unsuccessful cyberattack against the National Centre for Nuclear Research (Narodowe Centrum Badań Jądrowych, NCBJ) in Poland. Early technical indicators suggested that the activity was likely linked to Iran, although officials publicly cautioned that the Iranian nexus could be deliberate misdirection. According to statements from the Centre, the integrity of its systems was not compromised. The incident followed, and was contextualised alongside, a separate confirmed Iran-linked cyberattack against US medical-device company Stryker that disrupted Microsoft systems for thousands of employees. The NCBJ incident is part of a broader pattern of Iran-linked disruptive and retaliatory cyber operations, some of which have targeted critical sectors including research, energy, health, government, and telecommunications in NATO and partner countries. Despite being reported as unsuccessful, the targeting of a national nuclear research centre raises concern about reconnaissance or prepositioning activity against sensitive energy and research infrastructure in a NATO member state.
Confidence: Medium
The primary subject is a hostile cyber incident against critical national infrastructure in Poland, with initial indicators suggesting an Iran-linked operation. This clearly fits the Cyber & Information Warfare category under attacks on critical infrastructure. Authorities explicitly labelled it an unsuccessful cyberattack, justifying classification as an aggressor signal and HYBRID_SIGNAL. Confidence is not 'High' because attribution remains tentative and officials themselves caution that ap...
Source URL
https://cert.europa.eu/publications/threat-intelligence/cb26-04
Source reliability
B
Info credibility
2
Event time
Mar 12, 2026, 00:00 UTC
Event time confidence
unknown
Location
National Centre for Nuclear Research (NCBJ)
Country
Poland
Countries
Poland
Tags
Poland, Iran, National Centre for Nuclear Research, NCBJ, nuclear research, energy sector, critical infrastructure, unsuccessful cyberattack, attribution uncertainty, false flag risk, Microsoft systems disruption (Stryker context), Disruption & destruction, CERT-EU, March 2026, retaliatory cyber operations, Iran-linked activity in Europe, NATO member targeting
Signal
Submitted
Nov 6, 2026, 20:50 UTC
On 12 March 2026, Polish authorities disclosed an unsuccessful, likely Iran-linked cyberattack on Poland's National Centre for Nuclear Research; officials said system integrity was preserved but warned the apparent Iranian origin might be misdirection.
On 12 March 2026, Polish authorities reported an unsuccessful cyberattack against the National Centre for Nuclear Research (Narodowe Centrum Badań Jądrowych, NCBJ) in Poland. Early technical indicators suggested that the activity was likely linked to Iran, although officials publicly cautioned that the Iranian nexus could be deliberate misdirection. According to statements from the Centre, the integrity of its systems was not compromised. The incident followed, and was contextualised alongside, a separate confirmed Iran-linked cyberattack against US medical-device company Stryker that disrupted Microsoft systems for thousands of employees. The NCBJ incident is part of a broader pattern of Iran-linked disruptive and retaliatory cyber operations, some of which have targeted critical sectors including research, energy, health, government, and telecommunications in NATO and partner countries. Despite being reported as unsuccessful, the targeting of a national nuclear research centre raises concern about reconnaissance or prepositioning activity against sensitive energy and research infrastructure in a NATO member state.
Confidence: Medium
The primary subject is a hostile cyber incident against critical national infrastructure in Poland, with initial indicators suggesting an Iran-linked operation. This clearly fits the Cyber & Information Warfare category under attacks on critical infrastructure. Authorities explicitly labelled it an unsuccessful cyberattack, justifying classification as an aggressor signal and HYBRID_SIGNAL. Confidence is not 'High' because attribution remains tentative and officials themselves caution that ap...
Source URL
https://cert.europa.eu/publications/threat-intelligence/cb26-04
Source reliability
B
Info credibility
2
Event time
Mar 12, 2026, 00:00 UTC
Event time confidence
unknown
Location
National Centre for Nuclear Research (NCBJ)
Country
Poland
Countries
Poland
Tags
Poland, Iran, National Centre for Nuclear Research, NCBJ, nuclear research, energy sector, critical infrastructure, unsuccessful cyberattack, attribution uncertainty, false flag risk, Microsoft systems disruption (Stryker context), Disruption & destruction, CERT-EU, March 2026, retaliatory cyber operations, Iran-linked activity in Europe, NATO member targeting