--- title: Poland Energy Survives Attack on Wind, Solar Infrastructure description: In late December 2025, Russia-aligned threat actors conducted wiper attacks against over 30 renewable energy farms, a manufacturer, and a heating plant in... canonical: https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Poland Energy Survives Attack on Wind, Solar Infrastructure | daily.dev og:description: In late December 2025, Russia-aligned threat actors conducted wiper attacks against over 30 renewable energy farms, a manufacturer, and a heating plant in... og:url: https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw og:image: https://api.daily.dev/og/posts/MTx8CXkDW.png og:image:alt: Poland Energy Survives Attack on Wind, Solar Infrastructure og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Poland Energy Survives Attack on Wind, Solar Infrastructure **[Dark Reading](https://daily.dev/sources/dr)** · 6 min read · 0 upvotes · 0 comments ## Summary In late December 2025, Russia-aligned threat actors conducted wiper attacks against over 30 renewable energy farms, a manufacturer, and a heating plant in Poland — marking the first large-scale cyberattack targeting decentralized energy resources (DERs) like wind turbines and solar farms. Polish PM Donald Tusk confirmed the attack failed, but CERT Polska and Dragos linked the activity to threat clusters Electrum and Kamicite, both overlapping with the notorious Sandworm group. Attackers gained initial access via vulnerable internet-facing edge devices using default credentials, then deployed wipers that damaged RTUs and HMIs, causing loss of visibility and control — though energy production continued. CISA issued a security alert highlighting OT/ICS security gaps exposed by the incident. Experts warn that countries with higher DER penetration, such as the US or Nordic nations, could face catastrophic cascading failures from a similar attack. Recommended mitigations include firmware verification, changing default credentials, OT/IT segmentation, and incident response planning for compromised field devices. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Russian hackers breached Polish power grid thanks to bad security, report says](https://daily.dev/posts/russian-hackers-breached-polish-power-grid-thanks-to-bad-security-report-says-ot56oi0pf) · TechCrunch · 0 upvotes · 0 comments - [EU and UK officially blame Russian spies for cyberattack on Poland's power grid](https://daily.dev/posts/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-poland-s-power-grid-muvagan0j) · The Register · 0 upvotes · 0 comments - [State-affiliated hackers set up for critical OT attacks that operators may not detect](https://daily.dev/posts/state-affiliated-hackers-set-up-for-critical-ot-attacks-that-operators-may-not-detect-9ff6oq2ee) · CSO Online · 0 upvotes · 0 comments - [Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center](https://daily.dev/posts/poland-suspects-iranian-actors-are-behind-attack-on-its-nuclear-power-center-j6cswql8m) · Security Boulevard · 1 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Poland Energy Survives Attack on Wind, Solar Infrastructure","url":"https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw"},"datePublished":"2026-02-23T22:51:32.969Z","dateModified":"2026-02-23T22:52:24.573Z","description":"In late December 2025, Russia-aligned threat actors conducted wiper attacks against over 30 renewable energy farms, a manufacturer, and a heating plant in...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2ea4e6bea349de02d391f07797128df4?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/2ea4e6bea349de02d391f07797128df4?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Dark Reading","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Dark Reading","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/dr","url":"https://daily.dev/sources/dr"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/poland-energy-survives-attack-on-wind-solar-infrastructure-mtx8cxkdw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Dark Reading","item":"https://daily.dev/sources/dr"},{"@type":"ListItem","position":3,"name":"Poland Energy Survives Attack on Wind, Solar Infrastructure"}]} ```