Archive — US — techcrunch
Russian hackers breached Polish power grid thanks to bad security, report says
Polish government reports a breach of its power grid by Russian hackers exploiting poor security measures, targeting energy infrastructure in December 2022. The hackers gained access using default credentials, attempted to deploy malware, but failed to disrupt power. Historical hacking group Sandworm was implicated, though Poland's CERT points to another group, Berserk Bear, focusing on espionage rather than destruction.
Key points
- Russian hackers accessed Polish energy infrastructure exploiting poor security, notably default usernames and lack of multi-factor authentication.
- The attack occurred in December 2022, targeting wind and solar farms and a heat-and-power plant.
- Malware was deployed to attempt destruction of systems, but was thwarted at the plant, causing inoperability at renewable energy sites.
- Cybersecurity firms named Sandworm as the likely culprit, known for past energy attacks, while Poland's CERT attributes it to Berserk Bear.
Why it matters
- This incident highlights the ongoing cybersecurity vulnerabilities within critical infrastructures globally amid rising geopolitical tensions.
- 2025 IT trends indicate a growing need for robust cybersecurity protocols, especially as state-sponsored attacks increase, emphasizing multi-factor authentication and proactive defense strategies.
The breach exemplifies critical vulnerabilities in energy infrastructure and underscores the necessity for enhanced cybersecurity measures as global threats evolve.