Polish railway radio system sabotage

On 25 August 2023, Poland’s railway network was disrupted by unauthorised radio broadcasts of the railway emergency stop signal. Attackers transmitted the 150.100 megahertz frequency signal over railway radio frequencies, which automatically triggers emergency braking on trains, spoofing a legacy system without authentication or encryption using inexpensive radio equipment. The incident halted around 20 freight and passenger trains across several regions, including rail lines used to send supplies to Ukraine.

Impact

The operational impact was limited: trains were stopped temporarily and services resumed once the signals ceased. No injuries were reported. However, the incident points to wider strategic weaknesses. Poland’s railways are a major logistical route for Western military aid to Ukraine, making them a high-value target for disruption.

Attribution

Although the investigation did not immediately confirm state responsibility, several indicators point toward possible Russian-linked hybrid activity.

The Russian national anthem and excerpts of speeches by Vladimir Putin were played on the trains after they had been halted. According to Kamil Basaj of the Polish Government’s information security team, the target was also the public psyche: “These moves are all designed to build up the feeling of the country being under threat,” such actions are meant to “discredit the state and its structures and make people feel that security has been undermined, taking them out of their comfort zone”. This attack fits into Russia’s wider hybrid warfare aims to destabilise the Polish state. Polish authorities are investigating Russian sabotage.

Lessons

Legacy infrastructure vulnerability: analogue systems without authentication can be easily spoofed.

Low-cost hybrid tactics: inexpensive equipment can disrupt critical infrastructure.

Logistics as targets: transport corridors supporting Ukraine are likely focal points for Russian hybrid pressure.

Sabotage has cognitive goals, as well as infrastructural ones