Russian hacktivists targeted a hydropower plant in Tczew, Poland, twice in 2025. The first attack struck during maintenance, limiting damage. Months later, attackers compromised SCADA systems and gained control of turbine speeds and water levels, causing power output to drop to zero for 30 to 60 minutes at a time.

The Tczew attacks were part of a broader campaign against Polish critical infrastructure, including water, sewage, and hydropower facilities. Each breach began with an exposed internet-facing port. BlastWave’s Network Cloaking makes those ports invisible, eliminating exposed endpoints, usable credentials, and lateral movement so attackers scan the network and find nothing.