From Disinformation to Espionage – Russia’s Hybrid Actions Against Poland

Why It Matters

Poland’s security posture is a bellwether for NATO’s eastern flank, and escalating Russian hybrid tactics threaten EU stability and critical infrastructure. The pressure forces Western allies to reassess defensive coordination and resilience measures.

Key Takeaways

• Russia spent $2‑4 billion yearly on cognitive operations
• Over 3,000 cyber attacks hit Poland daily Jan 2026
• 62% Russians view Poland as hostile, poll shows
• 71% Poles fear election manipulation by disinformation
• 50+ sabotage suspects detained in late 2025

Pulse Analysis

Russia’s hybrid warfare model blends traditional espionage with digital aggression and narrative control, creating a multi‑vector threat that exploits Poland’s NATO membership and its support for Kyiv. By allocating between $2 billion and $4 billion annually to cognitive operations, Moscow funds a sophisticated ecosystem of state‑run media, social‑media bots, and covert intelligence assets. Recent penetrations of the Ministry of National Defence illustrate how physical espionage complements cyber campaigns that now average 2,000‑4,000 attacks per day, targeting government portals, energy grids, and water systems. This convergence amplifies the strategic pressure on Warsaw, eroding public trust and complicating crisis response.

The cyber dimension has become especially pronounced. Check Point Research reports that in January 2026 Poland repelled roughly 3,100 attacks weekly, far outpacing neighboring states. Notable incidents include the December 2025 Electrum‑linked strike that disrupted 30 district‑heating facilities, exposing vulnerabilities in renewable‑energy distribution. While Polish cyber‑defence teams have earned high ratings, the sheer volume and persistence of assaults strain resources and raise the risk of collateral damage to civilian services. Such activity fuels broader EU concerns, as Eurobarometer data show 71% of Poles fear election tampering, reflecting a regional anxiety that could destabilise democratic processes.

Policy makers are responding with a mix of diplomatic, legal, and technical measures. The European Democracy Shield programme aims to bolster resilience against disinformation, while NATO’s enhanced forward presence in Poland seeks to deter kinetic escalation. However, experts warn that hybrid actions can quickly transition to conventional conflict, underscoring the need for integrated threat‑sharing, rapid incident response, and investment in critical‑infrastructure hardening. Strengthening public‑media literacy and expanding joint cyber‑exercise frameworks will be essential to blunt Russia’s multi‑layered pressure and preserve security on the EU’s eastern border.