a twitter account named "anonymous poland" (@anpoland) claimed responsibility for the attack on the world anti-doping agency and released data stolen from the court of arbitration for sport, a secondary target. threatconnect supports the view that anonymous poland is a sockpuppet of fancy bear, noting the change from a historical focus on internal politics. a screen capture video uploaded by anonymous poland shows an account with polish language settings, but their browser history showed that they had made searches in google.ru (russia) and google.com (us), but not in google.pl (poland).