The 2025 cyberattack on the Polish power grid began on 29 December 2025 and continued until the following day. ^{[1] [2] [3]}

Contents

• Attribution
• References
• External links

The attack targeted both IT devices and physical industrial devices, which is unusual. ^{[1] [2]}

Targets included:

• Renewable energy plants ^{[1] [2]}
• a large combined heat and power plant ^{[1] [2]}
• a manufacturing company ^{[1] [2]}

Attribution

CERT Polska attributed the attack to Berserk Bear. ^{[1] [2]}

ESET attributed the attack to Sandworm with medium confidence. ^{[4] [3]}

Dragos Security also attributed the attacks to Sandworm. ^[5]

References

External links

• CERT Polska report