Polish authorities have announced the arrest of a Russian citizensuspected of unauthorized access to computer networks of local organizations, a significant success in the fight against cybercrime affecting Polish and European businesses.

The operation was carried out on November 16, 2025 by officers of the Central Office for Combating Cybercrime, which operates under the Krakow Prosecutor's Office. The suspect, according to authorities, entered Poland illegally in 2022 and received refugee status in 2023.
See also: Is the Lazarus Group behind the hack of crypto exchange Upbit?
The nature of the attacks
The Russian citizen is accused of carrying out sophisticated cyberattacks targeting multiple computer systems of local organizations. Investigators found that he gained unauthorized access to computer systems, including sensitive databases, by bypassing security measures and violating the data structure.
Experts emphasize that such attacks can cause significant losses, not only for businesses, but also for their customers, as they include possible theft of personal and financial data.
After the indictment, prosecutors requested the suspect's detention until trial, a request that was approved by the Kraków-Środmieście District Court, setting a three-month detention period.
International cybercrime connections and networks
Authorities suspect the suspect may be part of a wider international network of cybercriminals targeting organizations in Poland and other European Union countries. Investigators are working intensively to identify additional victims and determine the full extent of the damage caused.
See also: Bloody Wolf expands attacks with Java-based NetSupport RAT
The case highlights the ongoing threat from state-backed or internationally based cybercriminals, who target critical infrastructure and businesses at a European level.
Strengthening security and international cooperation
Poland continues to strengthen its capabilities cyber protection, coordinating actions with international organizations and law enforcement agencies. The goal is to more quickly detect, locate and apprehend those responsible for network attacks and data breaches.
Cybersecurity officials point out that the increasing complexity of attacks requires cooperation at the national and international levels, as perpetrators often operate infrastructure in multiple countries and use sophisticated identity concealment techniques.

Poland's commitment
The arrest of the suspect demonstrates Poland's commitment to investigating and prosecuting cybercriminals, regardless of their nationality. Authorities say the success sends a message to international perpetrators that attacks on Polish networks will not go unanswered.
See also: Qilin RaaS: MSP breach led to 2TB data exposure
At the same time, the investigation is continuing to determine whether there are connections to organized groups operating in Europe, while the possible identity of other accomplices remains under investigation.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The broader context of cyber threats
Experts stress that these incidents are not isolated. Europe is facing increasing pressure from cyberattacks, both from state-sponsored actors and international criminal groups. Targets include commercial businesses, infrastructure and public services, with the impact ranging from financial losses to data security issues.

Strengthening capabilities to record, analyze and respond to cyberattacks is now a strategic priority for all EU countries.
The arrest of the Russian suspect in Krakow is a powerful example of how coordinated action by authorities can curb international cybercrime. As attacks become increasingly sophisticated, Poland and European agencies continue to invest in preventing, detecting and prosecuting perpetrators, strengthening the security of citizens and businesses in the digital age.
