Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Summary
Hackers successfully breached the control systems of a Polish combined heat and power plant by exploiting its private cellular network. The attackers managed to shut down a steam turbine and the process-water treatment system, impacting heat supply to approximately 50,000 residents.
IFF Assessment
This incident represents a significant failure in operational technology (OT) security, demonstrating a successful attack that disrupted critical infrastructure.
Defender Context
This incident highlights the growing threat to critical infrastructure through the compromise of operational technology (OT) networks. Defenders must prioritize securing the extended attack surface created by the integration of IT and OT systems, particularly focusing on the security of private cellular networks and remote access points used for industrial control systems.