MIT TRACE

MIT CTL Logo
Back to Main Dashboard

Coordinated OT cyberattack disrupts remote monitoring/control at 30+ Polish renewable plants

On 29 December 2025, a coordinated cyberattack targeted OT/ICS at more than 30 wind and solar plants in Poland. According to CERT Polska and CISA, destructive tools wiped HMI data and damaged RTUs/firmware, cutting remote monitoring and control even as generation continued, creating significant operational and safety concerns.

72

Estimated severity

72 / 100

90

Source reliability

90 / 100

Approximate Date

29/12/2025

Targeted Company

MULTIPLE POLAND RENEWABLE ENERGY PLANTS

Targeted Company Supply Chain Impact

  1. Distribution & Fulfillment

  2. Procurement & Sourcing

  3. Production & Manufacturing

  4. Sales (Retail & Ecommerce)

  5. Warehousing

  6. Service Delivery

  7. Unrecognized Impact

Supply Chain Relations

No information

Geographic Impact

Country Targeted Company

Poland

POL

Other Affected Countries

No other affected countries reported

Target country

Poland

Affected countries

Poland

Impacted regions

Europe · Poland

Operational Impact

Duration

No information

Financial impact (USD M)

No information

Impact types

OT or ICS disruptionOperational disruptionService degradation

Affected sectors

Energy & Utilities

Affected departments

Facilities & Physical OperationsInformation Technology

Attack Profile

Attack types

ICS/OT compromiseWiperMalwareExploitation of misconfigurationUnauthorized access

Attributed threat actors

No information

Sources

Please rotate your phone

MIT TRACE is optimized for landscape orientation on mobile.