CERT Polska Reports Cyber Attacks on Over 30 Renewable Farms

CERT Polska, the Polish computer emergency response team, has disclosed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private manufacturing company, and a large combined heat and power plant (CHP) that provides heat to nearly half a million customers across the country. The incident occurred on December 29, 2025, highlighting significant vulnerabilities in the cybersecurity landscape concerning renewable energy infrastructure.

The agency attributed these attacks to a well-organized threat actor, indicating a growing trend of cyber threats against critical infrastructure. This alarming situation underscores the importance of robust cybersecurity measures, particularly in sectors that are vital for national energy supply and sustainability efforts.

Impact of the Cyber Attack on Renewable Energy Infrastructure

The implications of these cyber attacks are far-reaching. Targeting renewable energy sources such as wind and solar farms not only disrupts energy production but also poses a threat to the stability of the national grid. With an increasing reliance on renewable energy, any compromise to these systems can lead to widespread outages and affect the overall energy supply chain.

Moreover, the attack on a large CHP plant, which serves a significant population, raises concerns about the potential for severe service interruptions. Such disruptions can have cascading effects on residential heating, impacting thousands of households during critical periods. This incident serves as a reminder of the vulnerabilities present in our energy systems and the need for heightened awareness and improved cybersecurity practices.

For users of these renewable energy systems, the risks extend beyond mere energy disruption. Cybersecurity vulnerabilities can lead to unauthorized access to sensitive data, potentially compromising user privacy and system integrity. As the energy sector increasingly integrates digital technologies for monitoring and management, the potential for data breaches and other cyber incidents escalates.

Context

This incident is part of a broader trend where cyber attacks are increasingly targeting critical infrastructure globally. The renewable energy sector, while essential for sustainable development, has become an attractive target for cybercriminals due to its reliance on interconnected systems and the potential for significant disruption. The rise in such attacks highlights the urgent need for comprehensive cybersecurity strategies that encompass not only immediate response measures but also long-term resilience planning.

What to do

To mitigate the risks associated with such cyber attacks, individuals and organizations should take immediate action. Here are some prioritized steps:

Update all affected software to the latest versions immediately.
Enable automatic updates where possible to ensure ongoing protection.
Monitor security advisories from affected vendors to stay informed about vulnerabilities.
Use a VPN service to protect your internet traffic. Consider using a reliable VPN service like NordVPN or Surfshark to enhance your online security.
Implement additional security measures, such as multi-factor authentication, to further safeguard sensitive information.