Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Polish power plant operators suffered a significant cyberattack that led to the shutdown of a steam turbine and process-water treatment system. The attack exploited a private cellular network used by the grid operator to connect remote equipment, originating from a compromised wind farm. Attackers leveraged default credentials and a permissive APN configuration to gain access to industrial control systems, including PLCs and WAGO controllers, ultimately causing operational disruption. The incident highlights a critical vulnerability related to the widespread use of private APNs in industrial environments and the need for robust security practices.