Follow-up report on the December 2025 cyberattack against Poland’s energy sector

CERT Polska describes coordinated attacks against Poland’s energy infrastructure on 29 December 2025 whose objective was purely destructive. In addition to previously disclosed incidents, a smaller combined heat and power plant supplying heat to 50,000 residents was attacked.