Poland
POL
Smaller Polish CHP plant briefly halted in Dec 29, 2025 cyberattack — CERT Polska
CERT Polska’s follow-up report confirms that on 29 December 2025 a coordinated destructive cyber campaign against Poland’s energy sector also hit a smaller combined heat and power (CHP) plant. Using a previously unobserved private APN attack vector, the intrusion stopped a steam turbine and the technical water treatment station, interrupting cogeneration and causing a short downtime. Operators restored operations quickly and heat delivery to customers was not interrupted.
45
Estimated severity
45 / 100
93
Source reliability
93 / 100
Approximate Date
29/12/2025
Targeted Company
No information
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Poland
Affected countries
Poland
Impacted regions
Europe · Poland
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Production interruptionOT or ICS disruption
Affected sectors
Energy & Utilities
Affected departments
Facilities & Physical Operations
Attack Profile
Attack types
ICS/OT compromise
Attributed threat actors
No information
Sources
Incident Sources
cert.plhttps://cert.pl/posts/2026/08/uzupelnienie-raportu-incydent-sektor-energii-2025cert.plhttps://cert.pl/en/posts/2026/08/incident-follow-up-report-energy-sector-2025gov.plhttps://www.gov.pl/web/baza-wiedzy/raport-uzupelniajacy-na-temat-incydentu-w-sektorze-energii-29-grudnia-2025-rcert.plhttps://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025