Poland
POL
Hackers breach Polish power plant controls; PLCs switched to STOP and turbine shut down
CERT Polska disclosed that on December 29, 2025, attackers accessed a municipal CHP plant in Poland via a private cellular APN and misconfigurations, reached OT systems, and switched Siemens PLCs to STOP, password-protecting them. The steam turbine and process-water treatment system were shut down, interrupting cogeneration; operators restored the installation before customer heat or electricity supplies were disrupted.
80
Estimated severity
80 / 100
97
Source reliability
97 / 100
Approximate Date
29/12/2025
Targeted Company
POLISH CHP POWER PLANT
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Poland
Affected countries
Poland
Impacted regions
Europe · Poland
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Facility shutdownOT or ICS disruptionProduction interruptionService unavailabilityOperational disruption
Affected sectors
Energy & Utilities
Affected departments
Facilities & Physical OperationsInformation Technology
Attack Profile
Attack types
ICS/OT compromiseUnauthorized accessExploitation of misconfiguration
Attributed threat actors
No information
Sources
Incident Sources
cert.plhttps://cert.pl/en/posts/2026/01/incident-report-energy-sector-2025helpnetsecurity.comhttps://www.helpnetsecurity.com/2026/08/11/poland-energy-sector-cyberattack-heating-plant-private-apnhackmag.comhttps://hackmag.com/news/energy-plant-hacktherecord.mediahttps://therecord.media/poland-uncovers-critical-infrastructure-attack-hiddenisssource.comhttps://www.isssource.com/attackers-shut-down-polish-power-plant