A cyberattack on a Polish combined heat and power plant in December 2025, initially mistaken for a contractor error, has been revealed as the first known instance of hackers using a private cellular network to breach an industrial control system.