@rysiek It's all very odd. They surely must know that absolutely noone is buying the "but hackers" story - especially after PCERT decided it was credible.
I don't have knowledge of Polish cultural norms or media portrayal of "hacking", but their audience isn't Poles - it's rail operators across Europe. They've massively misjudged this by not just blaming it on an error, apologising profusely, fixing it and putting it to bed. Instead they're going for an industry-wide "Streisand Effect".