The latest Polish hydropower attack has once again exposed how vulnerable critical infrastructure remains to cyberthreats. Hackers successfully infiltrated a plant near Gdańsk, this time striking while the turbines were fully online. The incident highlights the serious risks facing operational technology in Europe.
How the Attack Unfolded
On August 10, 2025, attackers breached the control system of a small hydropower plant in northern Poland. Unlike the previous attempt in May, when the facility was offline, this intrusion caused active disruption. Hackers manipulated system parameters to extremes, forcing erratic rotor movement and unstable power generation.
The attackers even released a video showing the compromised interface, leaving little doubt about the authenticity of the breach. This visual proof marked a significant escalation, demonstrating both capability and intent to destabilize Poland’s infrastructure.
A Pattern of Critical Infrastructure Attacks
This event is part of a wider campaign against Poland’s essential services. Recent attacks have targeted water treatment facilities, sewage systems, and even public fountains. Authorities revealed that hackers also attempted to breach a major city’s water supply, an incident that could have endangered thousands of residents if successful.
These repeated incidents underscore the weaknesses of legacy control systems, which were never designed with cybersecurity in mind. Their limited defenses make them attractive targets for hostile groups.
Government Response and Warnings
Poland’s Deputy Prime Minister Krzysztof Gawkowski confirmed the hydropower attack and revealed that the government had blocked other attempts on municipal water infrastructure. CERT Polska and the Ministry of Digital Affairs have since issued urgent security guidance, urging operators to update defenses and adopt stronger monitoring practices.
Why This Matters
Industrial control systems play a central role in maintaining essential services, yet they remain highly exposed to cyberattacks. The latest Polish hydropower attack shows that adversaries can achieve real operational disruption, not just digital intrusions. Without significant investment in security, future attacks could have even more destructive consequences.
Conclusion
The Polish hydropower attack proves that critical infrastructure is under constant threat. Hackers are not only breaching systems but also demonstrating their success to intimidate and destabilize. Poland’s case serves as a warning to all nations relying on outdated industrial systems. Strengthening defenses, improving monitoring, and fostering international cooperation are urgent steps to prevent further damage.


0 responses to “Polish Hydropower Attack Disrupts Critical Systems”