CERT.PL Confirms Private APN Exploited to Breach Polish Energy Grid Controls

Poland's cybersecurity authority CERT.PL has confirmed that attackers exploited private Access Point Names (APNs) — carrier-provisioned cellular network segments — to compromise industrial control systems at a Polish energy facility. This marks the first documented case of private APN abuse as a primary attack vector into SCADA and ICS networks. Attackers reportedly pivoted through telecom carrier infrastructure by compromising IoT or telemetry devices on the private APN, then abused DNS and DHCP services to reach deeper operational technology environments. The attack exposes a widespread security misconception: private APNs, long assumed to function as isolated network segments, still maintain connectivity to carrier backbone infrastructure and DNS resolution paths. CERT.PL's disclosure signals an urgent need for energy sector defenders to reassess segmentation assumptions in telecom-connected industrial environments.