Polish Security Agency Reports ICS Breaches at Five Water Treatment Plants

Poland's Internal Security Agency has reported that five water treatment plants were breached in 2025, with attackers gaining access to industrial control systems through weak passwords and internet-exposed systems. In some cases, hackers obtained the ability to modify operational parameters that could have directly threatened public water supplies. The agency attributes the attacks to Russian state-sponsored groups including APT28 and APT29, as well as Belarusian-linked actors, as part of a broader surge in cyberattacks targeting Poland's critical infrastructure.