Polish Water Treatment Plants Breached

While it happened last year and it is now coming to light, attackers breached water treatment facilities in five towns in Poland over a period of time where the threat actors were able to gain access to industrial control systems in some cases.
In a public report, Poland’s Internal Security Agency (ABW) said water treatment stations in Jabłonna Lacka, Szczytno, Małdyty, Tolkmicko and Sierakowo ended up targeted in the attacks.
“Attackers, gaining access in some cases to industrial control systems, had the ability to alter technical parameters of devices,” the report said after translation into English. While it didn’t, and not to over hype the issue, the threat actors had the opportunity to establish a risk to the water supply operations.
ABW did not publicly attribute the incidents to a specific group or country, according to the report. It did say, however, Poland faced intensified cyber activity in 2024 and 2025, “with particular emphasis on the special services of the Russian Federation,” according to a report in The Record.

Estimated Cost

Unknown at this time

Threat Source

Impacts

OT IT