Polish Security Agency Reports ICS Breaches at Five Water Treatment Plants
Poland’s Internal Security Agency (ABW) has documented a significant escalation in cyberattacks targeting industrial control systems (ICS) and other operational technology (OT) infrastructure during 2024 and 2025, with state-sponsored threat actors increasingly shifting focus toward the physical disruption of critical services.
A Polish official revealed in August 2025 that a cyberattack could have caused a city to lose its water supply, but the attack was thwarted. No technical information was shared at the time.
The government agency’s new report [written in Polish] provides more information about these types of attacks on the country’s water sector.
[ Read:Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion]
According to ABW, the most significant incidents involved direct intrusions into ICS at water treatment facilities across multiple Polish municipalities. In 2025, the agency recorded security breaches at water treatment stations in Jabłonna Lacka, Szczytno, Małdyty, Tolkmicko, and Sierakowo.
In...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
