Coordinated Cyberattack on Polish Renewable Energy Infrastructure

In December 2025 a coordinated cyberattack attributed to Russian hackers compromised internet-facing edge devices at about 30 wind and solar sites in Poland, using reused credentials and lack of multi-factor authentication to access RTUs and disrupt communications; while generation was not directly manipulated, attackers could have induced thermal runaway in battery energy storage systems, exposing significant cyber-physical risk and highlighting gaps in cyber-insurance coverage.