Coordinated Cyberattack Targets Poland's Energy Infrastructure

On December 29, 2025, Poland's energy system suffered a significant cyberattack, targeting operational technology systems at various sites, including wind farms and combined heat and power plants. The attack, attributed to the threat group ELECTRUM, was unprecedented in scale among NATO and EU nations, with over 270,000 cyberattacks reported in 2025 alone. Although the electricity supply was not disrupted, the attack's destructive intent raised alarms within Polish authorities. CERT Polska led the investigation, revealing that the attack involved sophisticated methods to compromise network infrastructure and remote terminal units (RTUs). The Polish government, under Prime Minister Donald Tusk, has since enhanced its cyber defenses in response to the increasing threat from Russia. The incident is notable for its coordinated nature and the shift in focus towards distributed energy resources, marking a significant escalation in cyber threats to critical infrastructure.

Key Points: • Poland experienced a coordinated cyberattack on December 29, 2025, targeting its energy infrastructure. • The attack was attributed to the threat group ELECTRUM, linked to previous attacks on electrical systems. • CERT Polska confirmed the attack's unprecedented scale, with over 270,000 cyberattacks recorded in 2025.