Heat and power (CHP) plant

The organisation operates as a combined heat and power (CHP) plant located in Poland. It produces both electricity and useful thermal energy from a single fuel source, improving overall energy efficiency. The plant supplies power to the national grid and delivers heat to nearby industrial, residential, or municipal consumers. As part of Poland’s critical energy infrastructure, it contributes to the country’s efforts to reduce emissions and enhance energy security. Its operations rely on digital control and monitoring systems typical of modern CHP facilities. The plant’s role situates it within the broader heat and power sector that supports both industrial processes and community heating needs.

On 29 December 2025, the CHP plant was among several Polish energy and industrial targets hit by a coordinated cyberattack. The intrusion began with attackers exploiting internet‑exposed FortiGate VPN concentrators that lacked multi‑factor authentication. Once inside, the threat actors attempted to deploy corrupted firmware, delete files, and push wiper malware through Group Policy Objects. An endpoint detection and response (EDR) solution installed at the plant blocked the execution of the wiper, limiting the potential damage. The attack was attributed to a Russia‑linked cyber group, reflecting a broader trend of state‑aligned actors targeting critical infrastructure. Although the plant faced attempts at irreversible data loss, the timely intervention of the EDR prevented significant operational disruption.