Now Hacked
EN
Malware

Destructive cyberattack targets about 30 Polish energy facilities

First reported · Last reported · 33 related reports

In December 2025, a destructive cyberattack targeted about 30 energy facilities in Poland. The attackers exploited default credentials and the absence of multi-factor authentication to attack communication and control systems, but no disruption to power generation occurred. Polish authorities said they had thwarted the attack and raised the possibility of links to Russia.

Key facts

Affected organization
Being confirmed
Incident type
Malware
Occurred / detected
Not confirmed
Scale of damage
Attacks on communication and control systems at about 30 energy facilities; no disruption to power generation
Cause / method
Intrusion exploiting default credentials and absence of multi-factor authentication, plus wiper malware attack
Location
Poland

Timeline

  1. Poland said it had thwarted a large-scale cyberattack targeting its power grid.
  2. The Polish prime minister said there were grounds to believe Russia was behind the attack.
  3. Analysis emerged that wiper malware had been used in the attack.
  4. CERT Polska released findings on the methods used to attack about 30 energy facilities and confirmed there was no disruption to power generation.
  5. The U.S. Cybersecurity and Infrastructure Security Agency warned U.S. infrastructure operators in connection with the attack in Poland.

33 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.