Reported by 1 outlet
Polish security agency reports ICS breaches at five water treatment plants — APT28 and APT29 attributed
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Polish security agency reports ICS breaches at five water treatment plants — APT28 and APT29 attributed
securityweek.com · 158d ago · May 9th, 2026
Poland's Internal Security Agency (ABW) has documented security breaches at five water treatment stations across the municipalities of Jabłonna Lacka, Szczytno, Małdyty, Tolkmicko, and Sierakowo. In some cases, attackers gained ICS access with the ability to modify operational parameters of equipment, creating direct risk to public water supply. The attack vectors were weak password policies and systems directly exposed to the internet. ABW attributes primary responsibility to Russian intelligence services — specifically APT28 and APT29 — operating through hacktivist personas, alongside UNC1151 (Belarus-linked). The incidents are part of a broader escalation targeting Polish critical infrastructure including energy, wastewater, and supply chains, with attackers seeking contract data, project documentation, and authentication credentials for downstream access.