Cyber attackers infiltrated a Polish combined heat and power plant by exploiting a private cellular network, temporarily disrupting heat and electricity generation. The breach, which occurred on December 29, 2025, revealed a novel attack vector targeting operational technology systems.