Now Hacked
EN-GB
Malware

Destructive cyber-attack targets about 30 Polish energy facilities

First reported · Last reported · 33 related reports

In December 2025, a destructive cyber-attack targeted about 30 energy facilities in Poland. The attackers exploited default credentials and the absence of multi-factor authentication to attack communication and control systems, but no disruption to power generation occurred. Polish authorities said they had thwarted the attack and raised the possibility of links to Russia.

Key facts

Affected organisation
Being confirmed
Incident type
Malware
Occurred / detected
Not confirmed
Scale of damage
Attacks on communication and control systems at about 30 energy facilities; no disruption to power generation
Cause / method
Intrusion exploiting default credentials and absence of multi-factor authentication, plus wiper malware attack
Location
Poland

Timeline

  1. Poland said it had thwarted a large-scale cyber-attack targeting its power grid.
  2. The Polish prime minister said there were grounds to believe Russia was behind the attack.
  3. Analysis emerged that wiper malware had been used in the attack.
  4. CERT Polska released findings on the methods used to attack about 30 energy facilities and confirmed there was no disruption to power generation.
  5. The US Cybersecurity and Infrastructure Security Agency warned US infrastructure operators in connection with the attack in Poland.

33 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.