Coordinated Cyberattacks Target Poland's Critical Infrastructure

On December 29, 2025, coordinated cyberattacks targeted Poland's critical infrastructure, including wind and solar farms, a private manufacturing company, and a combined heat and power (CHP) plant. These attacks did not succeed in disrupting energy production or distribution. Poland's national computer emergency response team, CERT Polska, concluded that all the incidents were the work of the same malicious actor and had a purely destructive nature. The attackers exploited an exposed VPN access to compromise the energy control systems.