Poland’s rapid expansion of offshore wind farms (OWFs) in the Baltic Sea elevates them to the status of critical infrastructure central to energy security. This article examines the legal responsibilities, institutional arrangements, and operational challenges in protecting OWFs against hybrid threats such as sabotage, espionage, and cyberattacks. It analyses national frameworks, EU directives (CER and NIS2), and the roles of the Navy, Border Guard, Maritime Offices, Government Centre for Security (RCB), and private operators. This work offers a responsibility matrix which highlights both institutional overlaps as well as gaps. The article concludes with recommendations for legal reforms, capability development, and inter-agency coordination to strengthen Poland’s offshore wind infrastructure.