Hackers Exploit Private Cellular Network to Disrupt Polish CHP Plant Operations

Hackers exploited a private cellular network to breach a Polish combined heat and power plant, shutting down a turbine and process-water system through untrusted APN configurations. The attack marked the first known use of private APN access as a real-world cyberattack vector, highlighting risks in industrial control network segmentation and default credentials.

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment.

The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:30 a.m. while the intruders were still active inside the network, and customers lost neither heat

Read original article