A coordinated cyberattack on December 29, 2025 targeted multiple sites across Poland’s electric system, focusing on distributed energy resources. Adversaries accessed OT systems at combined heat and power facilities and at wind and solar dispatch centers, disrupting communication and disabling key equipment, though no power outages occurred. The incident demonstrated ELECTRUM’s growing capability to penetrate and manipulate critical infrastructure. Dragos published this report to highlight how the attack exposed vulnerabilities in grid operations and to help organizations strengthen their defenses against similar threats.

Join for free to read