Energetyki Cieplnej Sp. z o.o.

Energetyki Cieplnej Sp. z o.o., also known as EPEC or Elbląskie Przedsiębiorstwo Energetyki Cieplnej, is a Polish heating energy company. Its core activity involves the operation of district heating infrastructure that supplies heat to residential and commercial customers in the Elbląg area. The company also maintains emergency dispatch services to ensure continuous operation of its heating network. Customer-facing functions include billing systems and application status inquiries that allow users to manage their service contracts. These services are delivered within the framework of Poland’s municipal heating sector.

The organisation is headquartered in Poland, with its operational base reflected in the name Elbląskie, indicating a focus on the city of Elbląg and its surrounding region. As a limited liability company (Sp. z o.o.), it operates under Polish corporate law and is subject to the regulatory requirements applicable to district heating providers. While specific figures regarding employee count, customer base, or annual output are not disclosed in the available sources, the company’s role as a provider of essential heating services positions it within the local utility landscape. Its market scope is primarily regional, serving the heating needs of the Elbląg community. The organisation’s activities are aligned with national energy policies that prioritize reliable and efficient heat distribution.

Distinguishing attributes of the company include its specialization in district heating and emergency dispatch, which together ensure both supply continuity and rapid response to operational incidents. In June 2022, the firm experienced a ransomware attack that encrypted files and disrupted customer-facing systems, yet its critical heating infrastructure and dispatch services remained unaffected. Despite an initial assessment that suggested no mandatory reporting obligation, the company proactively notified national data protection and internal security authorities and informed affected customers. Response efforts involved immediate restoration work, testing to confirm the absence of infection recurrence, and the establishment of a temporary customer contact number while telephony systems were being repaired. These actions demonstrate the organisation’s commitment to incident management, regulatory compliance, and maintaining customer communication during cyber‑security events.