Sources: last year's cyberattacks on Polish stock exchange and German steel plant were tied to Russia's growing hacking campaign against US and NATO
Cyberspace Becomes Second Front in Russia's Clash With NATO — German steel plant and Polish exchange said to be targeted Tweets: @andrew_s_bowen , @maxseddon , @alantonelson , @scottthurm and @ridt Tweets: Andrew S. Bowen / @andrew_s_bowen : “Russians acting directly for the government or with its approval are testing boundaries of the cyberbattlefield” http://bloom.bg/1OvNgfE Max Seddon / @maxseddon : Russia “lets loose the hounds” in cyberspace, stoking fears of a broad conflict with the U.S. Very important story: http://www.bloomberg.com/... Alan Tonelson / @alantonelson : #Russia reported going on a #CyberWarfare bender, too - including lots of targets in #Europe: http://www.bloomberg.com/... #Putin #NATO #tech Scott Thurm / @scottthurm : Russian hackers tied to attacks on Polish stock exchange, German steel mill in new examples of cyberwar http://bloom.bg/1OvNgfE Thomas Rid / @ridt : Bloomberg ups the ante with well-sourced piece and fresh material on Russian cyber ops, http://bloom.bg/1OvNgfE @jordanr1000 @MichaelRileyDC
Context & Ripple Effects
Bloomberg's sourcing in 2015 put names on what had been an open question: the [[a:976679|cyberattacks that would later open the Russia-Ukraine cyberwar against Viasat's KA-SAT satellite network]] belong to the same lineage — state-directed Russian operations against NATO-member infrastructure. At the time, hitting a Polish stock exchange or a German steel plant was still framed as 'testing boundaries,' as one of the reporters quoted put it.
The years of related coverage since have confirmed the pattern and sharpened it into doctrine: the US and allies now formally attribute operations to specific units, with Cadet Blizzard revealed as part of Russia's GRU Unit 29155, a group tied to coup attempts and assassinations alongside hacking.
First-order effects
- Poland and Germany are confirmed targets of Russian state-linked hackers, forcing both NATO governments to treat financial-market and industrial systems as military-relevant infrastructure rather than purely criminal or espionage concerns.
- The US and NATO face direct pressure to respond in kind — the report frames cyberspace as a second front in the NATO-Russia clash, not a side channel.
Second-order effects
- Defense against this campaign pulls private industry into the fight: by 2022, a quiet partnership between US tech companies, US and NATO intelligence agencies, and Ukrainian hackers was credited with blunting Russian offensive capabilities.
- The escalation dynamic runs both directions — Western stockpiled cyberweapons proved leak-prone after the Shadow Brokers disclosures raised concerns the NSA had lost control of tools it developed, arming adversaries with Western exploits.
Third-order effects
- Attribution is becoming institutionalized: from anonymous intrusions in 2015 to named units like GRU Unit 29155, the shift points toward cyber operations being treated under collective-defense frameworks rather than left to individual victim states.
- The battlefield has gone multi-sided — China-linked groups have repeatedly hacked Russian companies and government agencies for military secrets during the Ukraine war, suggesting great-power cyber conflict is no longer a two-player game.
The trend: State-directed cyber operations are moving from deniable probing of NATO infrastructure to formally attributed, unit-level warfare integrated into conventional military conflict.