Cybersecurity risks to European energy infrastructure

Researchers and cybersecurity experts have identified significant vulnerabilities within European renewable energy and critical infrastructure. Initial findings from the Dutch National Cyber Security Centre and Modat revealed over 8,500 internet-facing systems linked to wind and solar power parks across 35 countries. These exposures, particularly in Spain and Germany, included administrative interfaces that allowed for the viewing of live data and provided “Start, Stop and Reset” buttons for certain wind turbines.

As the threat landscape evolves, experts at the 9th Cybersecurity Forum in Brussels warned that risks are escalating due to artificial intelligence, connected devices, and geopolitical tensions. This follows documented attacks in December 2025 on Polish energy facilities and ongoing efforts by Ukraine’s Ukrenergo to manage a grid under sustained cyberattack.

An annual report from the European Union Agency for Cybersecurity (ENISA) noted an unprecedented surge in ransomware, with approximately 75% of victims classified as essential or critically important entities. The report also highlighted the discovery of over 48,000 new vulnerabilities, increasing supply chain risks across software and cloud infrastructure.