3 Ukrainian Hackers Arrested in Warsaw Amid Heightened Security Alert on Charges of National Defense Threats

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer

Key Takeaways

Polish police have arrested three Ukrainian nationals in Warsaw and charged them with offenses linked to national defense after a traffic stop revealed their car was loaded with computer hacking equipment that included FLIPPER hacking devices, laptops, routers, and antennas.

Hacking Equipment Seized in Warsaw

The men, aged 39, 42, and 43, are accused of possessing devices and programs adapted for committing crimes, specifically those that could damage computer data of significant importance to Poland's national security. 

The seized equipment “could even be used to interfere with the country's strategic IT systems, breaking into IT and telecommunications networks,” the police said. During the search of the vehicle, police discovered a significant cache of specialized tools, such as:

Seized equipment
Seized equipment | Source: Warsaw police
Seized equipment
Seized equipment | Source: Warsaw police

When questioned, the individuals claimed they were IT specialists traveling through Europe with plans to continue to Lithuania. However, police noted they were unable to explain the purpose of the equipment and feigned a lack of understanding of English when pressed with specific questions. 

Seized equipment
Seized equipment | Source: Warsaw police

While the police did not reveal the date of the arrest, a court has ordered them to be held in pre-trial detention for three months, according to Reuters. The nature of the hacking equipment seized suggests a potential for sophisticated cyber operations. 

Broader Context of Regional Cybersecurity Concerns

The arrests occur as Poland, a NATO member, remains on high alert for a suspected Moscow-backed campaign of railway sabotage and cyberattacks. While no direct link has been officially stated in this case, the charges related to national defense cyber threats reflect the tense geopolitical climate. 

This incident elevates the Poland cybersecurity alert status as authorities investigate the trio's motives. Authorities stated they are "considering various scenarios" regarding the men's intentions. 

The incident underscores the increasing vigilance required to counter potential hybrid threats targeting critical infrastructure within the region. Earlier this year, pro-Russian hacktivist groups NoName057(16) and Z-Pentest claimed that they had targeted Poland’s sewage treatment plant. In March 2025, Ukrainian railways were hit by a large-scale cyberattack.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: