Hackers Used a New 'Private Network' Trick to Sabotage Polish Energy Facility

Polish cybersecurity authority CERT.PL has revealed that hackers sabotaged a second energy facility in Poland using a previously undocumented attack method: pivoting through a private APN, or Access Point Name. A private APN is essentially a dedicated mobile network connection that organisations use to link remote equipment, such as industrial sensors or control systems, back to their core infrastructure.

CERT.PL described this as the first known case where a private APN was used as an entry point for an attack. Rather than breaching a facility through traditional internet-facing systems, the attackers appear to have exploited this normally isolated mobile connection to reach and interfere with critical operational equipment.

While full technical details remain limited, the incident highlights a growing trend: attackers are increasingly looking beyond standard IT networks to less-monitored pathways, including mobile and industrial control connections, to reach sensitive systems. For any organisation relying on private or dedicated network links for equipment monitoring or remote operations, this case is a reminder that these connections are not automatically safe simply because they're separate from the public internet.