Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:30 a.m. while the intruders were still active inside the network, and customers lost neither heat

The article reports a physical/operational technology intrusion into a Polish combined heat and power plant through a private cellular network, where attackers shut down a steam turbine and process-water treatment system and interrupted cogeneration. CERT Poland says the incident began in December 2025 and that operators restored service without disrupting heat deliveries to consumers.[4][8] RealGround relevance is limited because this is not an AI-specific incident; the practical implication is that organizations with AI-enabled monitoring, OT analytics, or cellular/remote-access dependencies should review supply-chain trust, network segmentation, and recovery readiness to reduce cascading operational risk.