Email systems compromised in recent POLSA cyberattack

A cyberattack has forced the Polish Space Agency (POLSA) to disconnect its systems and go offline after a serious breach of its IT infrastructure was detected over the weekend. The agency, known as POLSA, immediately cut off online access to contain the breach and protect sensitive data. Authorities have been informed, and an investigation is underway to understand the impact and source of the attack fully.

Established in September 2014, POLSA plays a vital role in Poland’s space industry and is a member of the European Space Agency (ESA). The agency focuses on supporting Polish companies involved in space technology, strengthening national defence through satellite capabilities, and helping businesses secure funding from ESA programmes. POLSA also collaborates with ESA members, the European Union, and international partners on a range of space exploration projects.

 

Although the POLSA cyberattack has been confirmed, the agency has not yet provided details about the type of cyber incident or how the attackers gained access.

 

No threat actor has been officially named or identified. However, internal sources revealed that the agency’s email systems were compromised during the attack, disrupting regular communication. In response, staff were asked to switch to phone calls until secure communication channels could be restored.

To help recover from the cyberattack, POLSA is now receiving support from both the Polish Computer Security Incident Response Team (CSIRT NASK) and the Polish Military Computer Security Incident Response Team (CSIRT MON). These teams are working closely with POLSA to secure its infrastructure, investigate the breach, and restore all affected systems.

Poland’s Minister of Digital Affairs, Krzysztof Gawkowski, has confirmed that authorities are actively working to identify those responsible for the cyberattack. The minister also assured that further information will be released as the investigation progresses.

More updates about the POLSA cyberattack are expected to be released once the investigation uncovers further details.