ICS/OT Cyberattack Disrupts Operations at Tczew Hydropower Plant, Poland
INCIDENT
A small hydropower plant near Tczew (in northern Poland, close to Gdańsk) was successfully breached in a cyberattack that disrupted its industrial control systems (ICS/OT).The attack disrupted the hydropower plant’s control systems, causing erratic turbine behavior, sudden stoppages, and periods of zero power output as attackers manipulated operational parameters. Unlike an earlier attempted breach in May 2025 (when the plant was offline and unaffected), the August incident was significant because it interfered with a functioning energy facility. There were no reported widespread blackouts in Poland due to this attack.
Incident Date
August 10, 2025
Location
Estimated Cost
Control system manipulation, turbine stoppage, temporary disruption of power generation
Victims
Type of Malware
No Malware identified
Threat Source
No threat source identified
