On December 29, 2025, during low temperatures and snowstorms, a series of destructive cyberattacks targeted at least 30 renewable energy facilities, including wind and solar farms and a CHP plant in Poland. The attacks led to a communication breakdown between the facilities and their operators but did not halt electricity generation. This escalation in cyber sabotage, which affects both IT and OT systems, marks a concerning trend in energy sector security. CERT Polska and impacted companies confirmed the attacks were executed by a common threat actor using compromised credentials.

On December 29, 2025, during low temperatures and snowstorms, a series of destructive cyberattacks targeted at least 30 renewable energy facilities, including wind and solar farms and a CHP plant in Poland. The attacks led to a communication breakdown between the facilities and their operators but did not halt electricity generation. This escalation in cyber sabotage, which affects both IT and OT systems, marks a concerning trend in energy sector security. CERT Polska and impacted companies confirmed the attacks were executed by a common threat actor using compromised credentials.