A NATO cyber simulation in Poland has shown how quickly attacks on energy, banking and public information systems can merge into a single crisis, with allied officials testing responses to a Russia-style campaign shaped by Ukraine’s wartime experience.

The three-day exercise was held in Bydgoszcz, home to NATO’s Joint Analysis, Training and Education Centre, known as JATEC. The centre is a joint NATO-Ukraine institution created to turn lessons from Russia’s war against Ukraine into practical training, analysis and operational adaptation for the Alliance.

The simulation placed participants inside a fictional crisis involving a hostile authoritarian neighbour, cyber attacks, public disorder and information manipulation. It tested allied responses to scenarios including a national blackout, a major flood and the hijacking of banking systems, all accompanied by AI-driven disinformation campaigns intended to confuse the public and disrupt official communication.

The exercise was not a conventional cyber-defence drill limited to networks, servers and technical recovery. Its value lay in showing that a serious attack would not remain inside one ministry, one agency or one system. A blackout can quickly become a public-order problem. A banking disruption can become a political crisis. Disinformation can turn a technical incident into a test of public trust.

For European governments, that is the central lesson. Cyber resilience can no longer be treated as the responsibility of technical teams alone. The next major hybrid crisis may involve electricity networks, emergency services, banks, transport systems, local authorities, social media platforms and national political leadership at the same time. The ability to patch systems matters, but so does the ability to communicate clearly before hostile narratives fill the gap.

Ukraine’s role in the exercise is particularly relevant. Ukrainian officials have lived for years with the combination of missile strikes, cyber attacks, electronic warfare and disinformation. Russia’s full-scale invasion has given Kyiv direct experience of how physical and digital pressure can be applied simultaneously against a state and its population. NATO says JATEC is intended to help Allies and Ukraine identify and apply lessons learned from Russia’s war against Ukraine.

In the simulation, Ukrainian participants reportedly played the adversary, using aggressive information tactics to imitate the methods faced daily by Ukraine. The point was not to stage an abstract war game, but to expose allied governments to the pressure of a contested information environment in which false narratives, fake assistance offers and contradictory messages appear at speed.

The result was close. NATO participants narrowly outperformed the fictional adversary, but the margin matters less than the weaknesses revealed by the exercise. In a real crisis, authorities would not have the luxury of slow coordination or carefully sequenced public statements. They would face simultaneous demands from citizens, media, local officials, financial institutions, allies and adversaries.

Artificial intelligence adds a further layer of difficulty. AI tools can increase the speed, volume and apparent credibility of hostile messaging. They can generate fake local updates, impersonate institutions, translate narratives across languages, and produce tailored content for different audiences. That does not make every hostile campaign effective, but it reduces the time available for governments to detect, attribute and respond.

The implications are immediate for NATO’s eastern flank, but they are not confined to it. Poland, the Baltic states and Nordic allies are more exposed to Russian pressure, but cyber and information attacks can affect any European state. Energy grids, payment systems and emergency messaging are national assets, but the disruption of one ally can quickly become a wider Alliance problem.

The Bydgoszcz exercise also highlights the changing purpose of NATO-Ukraine cooperation. Ukraine is not only a recipient of support. It has become a source of operational knowledge for the Alliance. The centre was formally inaugurated in February 2025 as the first joint NATO-Ukraine organisation of its kind and is designed to feed real-time lessons from the conflict into NATO defence planning.

The challenge for NATO is implementation. Exercises can identify gaps, but governments have to close them through budgets, staffing, legal authority, cyber reserves, public-private coordination and rehearsed crisis communication. Banks and utilities are often private or semi-private operators. Social media platforms are outside government control. Local authorities may be the first point of public contact, but not the first to receive classified warnings.

That creates a coordination problem before any attack begins. If an adversary can exploit confusion between central government, regional authorities, private companies and the public, it may not need to cause catastrophic technical damage. It may only need to create enough doubt that citizens stop trusting official instructions.

For Europe, this is a defence issue as much as a digital-policy issue. Hybrid attacks are designed to stay below the threshold of open war while imposing political, economic and social costs. NATO defines hybrid threats as a mix of military and non-military, covert and overt methods, including disinformation, cyber attacks and economic pressure.

The Polish simulation therefore points to a wider conclusion. Europe has invested heavily in military readiness, air defence and ammunition since Russia’s full-scale invasion of Ukraine. It also has to prepare for crises in which the first visible battlefield may be a power cut, a frozen banking app, or a flood of false emergency messages.

NATO’s narrow success in the exercise is a useful signal, but not a reason for reassurance. The test showed that allied systems can respond under pressure. It also showed that the margin between resilience and confusion may be thin. In a real crisis, that margin would matter.