Ukraine's Energy Infrastructure Under Cyber and Physical Attack

Ukraine has been subjected to systematic Russian physical and cyber attacks on its energy infrastructure for four consecutive winters, with near-daily strikes across 17 regions that have damaged or destroyed all thermal power plants and disrupted heating for thousands; operators have mitigated some effects using mobile cogeneration units, but cyber vulnerabilities remain significant, evidenced by the FrostyGoop malware incident in Lviv (Jan 2024) and a coordinated cyberattack on a Polish power plant (Dec 2025), underscoring regional risk and European unpreparedness.