Threat Intelligence

Hackers Shut Down Turbine at Polish Power Plant via Private Cellular Network

The Hacker News · 11 Aug 2026

Key Takeaway Businesses relying on remote access networks to control physical equipment should ensure those connections are segmented, monitored, and secured just as rigorously as their main IT systems.

A cyberattack on a Polish combined heat and power plant led to the shutdown of a steam turbine and its process-water treatment system after hackers gained access through the private cellular network the local grid operator uses to communicate with remote equipment. The plant supplies heat to approximately 50,000 residents, making it a critical piece of local infrastructure.

Operators began recovery efforts at around 7:30 a.m., but the attackers were still active within the network at that time. Despite the intrusion, customers did not lose heat or water service, suggesting operators were able to contain the impact on essential services even while the breach was ongoing.

The incident highlights a growing concern for critical infrastructure operators: private cellular networks used for remote monitoring and control can become an entry point for attackers if not properly secured. While this case involved a large utility, the underlying lesson applies broadly to any organisation using remote access technology to manage physical equipment or industrial systems.

Summarised by CISO AI from The Hacker News. We link back to every original so you can read it yourself.