ICS/OT Cyberattack Disrupts Operations at Tczew Hydropower Plant, Poland

January 23, 2026

INCIDENT

A small hydropower plant near Tczew (in northern Poland, close to Gdańsk) was successfully breached in a cyberattack that disrupted its industrial control systems (ICS/OT).The attack disrupted the hydropower plant’s control systems, causing erratic turbine behavior, sudden stoppages, and periods of zero power output as attackers manipulated operational parameters. Unlike an earlier attempted breach in May 2025 (when the plant was offline and unaffected), the August incident was significant because it interfered with a functioning energy facility. There were no reported widespread blackouts in Poland due to this attack.

Incident Date

August 10, 2025

Location

Poland

Estimated Cost

Control system manipulation, turbine stoppage, temporary disruption of power generation

Type of Malware

No Malware identified

Threat Source

No threat source identified