Story perspectives

Poland Hit by Coordinated Cyberattacks on Energy Sector

2/1/2026

Summary

Story summary

On December 29, 2025, Poland faced coordinated cyberattacks targeting more than 30 renewable energy facilities and a combined heat and power plant (CHP) serving nearly 500,000 people.
CERT Polska attributed the attacks to Static Tundra, a threat cluster linked to Russian state-sponsored hacking.
The incidents disrupted communications but did not affect electricity generation or heat supply.
Attackers used wiper malware DynoWiper and LazyWiper to damage systems and steal data.

History

Historical Context

In April 2007, Estonia faced a massive cyberattack that disrupted its government and banking systems, attributed to tensions with Russia over a Soviet-era statue's removal. This incident marked a significant escalation in state-sponsored cyber warfare, prompting NATO to establish a cyber defense center in Tallinn. The attacks underscored the vulnerabilities of digital infrastructure, influencing global cybersecurity strategies.

1 of 2

Story summary

On December 29, 2025, Poland faced coordinated cyberattacks targeting more than 30 renewable energy facilities and a combined heat and power plant (CHP) serving nearly 500,000 people.
CERT Polska attributed the attacks to Static Tundra, a threat cluster linked to Russian state-sponsored hacking.
The incidents disrupted communications but did not affect electricity generation or heat supply.
Attackers used wiper malware DynoWiper and LazyWiper to damage systems and steal data.

1 / 2