Thousands of European Wind and Solar Systems Exposed Online

01The Story新闻事实

Dutch researchers identified 8,547 internet-facing administrative or operational systems linked to solar parks and wind farms in 35 European countries. They said about 181 sites may have allowed full control, including the ability to stop turbines, while warning that exposed systems linked to public infrastructure could increase sabotage and disruption risks.荷兰研究人员在欧洲35个国家发现8,547个与太阳能园区和风电场相关、面向互联网的管理或运营系统。他们表示，约181个站点可能具备被完全控制的条件，包括停止风机的能力，并警告称，与公共基础设施相连的暴露系统可能增加破坏和运营中断风险。

Researchers identified 8,547 internet-facing systems linked to specific solar parks and wind farms in 35 European countries.研究人员在欧洲35个国家发现了8,547个可关联到具体太阳能园区和风电场的面向互联网系统。
The systems included administrative pages, login interfaces, and operational interfaces displaying data and controls.这些系统包括管理页面、登录界面，以及显示数据和控制功能的运营界面。
Researchers said they believed full control may have been possible at around 181 sites.研究人员表示，他们认为约181个站点可能具备被完全控制的条件。
The identified systems included 7,942 linked to solar parks and 605 linked to wind farms.被发现的系统中，有7,942个与太阳能园区相关，605个与风电场相关。
Spain had the most exposed solar systems at 2,766, while Germany had the most exposed wind systems at 212.西班牙暴露的太阳能系统最多，为2,766个；德国暴露的风电系统最多，为212个。

The findings show that renewable-energy expansion also creates a wider cyber-exposure surface across critical infrastructure.这项发现表明，可再生能源扩张也在关键基础设施中扩大了网络暴露面。

024 Dimensions维度分析

Comparison对比

Scale of exposure暴露规模

The researchers found thousands of internet-facing systems across both solar and wind assets, with solar-related systems accounting for most of the total. The findings were presented as systems that should not have been exposed to the internet.研究人员在太阳能和风电资产中发现了数千个面向互联网的系统，其中太阳能相关系统占大多数。研究人员称，这些系统本不应暴露在互联网中。

Total exposed systems暴露系统总数

20262026年8,547 systems

20262026年7,942 systems

20262026年605 systems

The systems were identified in 35 European countries.这些系统分布在欧洲35个国家。
Most of the systems found were administrative pages with login screens.被发现的系统大多是带有登录界面的管理页面。

Comparison对比

Country distribution各国分布

Spain recorded the highest number of exposed solar systems, while Germany led in exposed wind systems. The researchers cautioned that rankings partly reflected where they were able to link systems to specific sites.西班牙发现的暴露太阳能系统数量最多，德国则在暴露风电系统方面居首。研究人员提醒称，这一排名部分取决于他们能够将系统关联到具体站点的地区。

Exposed solar systems in Spain西班牙暴露的太阳能系统

20262026年2,766 systems

20262026年1,860 systems

20262026年212 systems

20262026年192 systems

Germany had 672 exposed solar systems.德国有672个暴露的太阳能系统。
Germany has Europe’s most installed solar capacity, according to the report.报道指出，德国拥有欧洲规模最大的已安装太阳能产能。

Stakeholder impact利益相关方

Potential operational impact潜在运营影响

Some exposed interfaces displayed live data and controls such as Start, Stop, and Reset, and some systems controlled several turbines or an entire wind farm. Researchers highlighted greater concern where turbines or arrays were closely linked to public infrastructure.一些暴露的界面显示实时数据，并提供“启动”“停止”和“重置”等控制功能；部分系统可以控制多台风机或整个风电场。研究人员特别关注与公共基础设施紧密相连的风机或阵列。

Researchers believed full control may have been possible at around 181 sites.研究人员认为，约181个站点可能具备被完全控制的条件。
The researchers urged operators to remove administrative interfaces from the internet immediately.研究人员敦促运营商立即将管理界面从互联网中移除。

Historical context历史脉络

Broader infrastructure context更广泛的基础设施背景

The findings came amid European concerns about critical infrastructure sabotage and cyberattacks. The report also cited a December 2025 attack on 30 wind and solar sites in Poland as an example of the potential threat.这项发现公布之际，欧洲正担忧关键基础设施遭到破坏和网络攻击。报告还引用了2025年12月波兰30个风电和太阳能站点遭攻击的事件，作为潜在威胁的一个例子。

Western governments have frequently attributed suspected sabotage and cyberattacks since Russia’s invasion of Ukraine in 2022 to Russia, which denies involvement.自2022年俄罗斯入侵乌克兰以来，西方政府多次将疑似破坏和网络攻击归因于俄罗斯，但俄罗斯否认参与。
Dutch intelligence agencies, police, and prosecutors warned last month that artificial intelligence was accelerating the threat.荷兰情报机构、警方和检察机关上月警告称，人工智能正在加速这一威胁。

03Timeline时间线

2022 Russia’s invasion of Ukraine was followed by frequent Western government concerns about suspected sabotage and cyberattacks against European critical infrastructure.俄罗斯入侵乌克兰后，西方政府频繁担忧欧洲关键基础设施遭到疑似破坏和网络攻击。
2025-12 CERT Polska analyzed an attack on 30 wind and solar sites in Poland.波兰网络安全团队CERT Polska分析了一起针对波兰30个风电和太阳能站点的攻击。
2026-10-06 Dutch researchers presented their findings at the ONE Conference in The Hague.荷兰研究人员在海牙举行的ONE Conference上公布了研究结果。

Key takeaway核心结论

Internet exposure of renewable-energy control systems could turn cyber weaknesses into operational risks for European power infrastructure.可再生能源控制系统暴露在互联网中，可能将网络弱点转化为欧洲电力基础设施的运营风险。

04What to Watch后续关注

Whether operators remove exposed administrative interfaces and address systems identified by the researchers.运营商是否会移除暴露的管理界面，并处理研究人员发现的相关系统。
Whether authorities in Germany, Italy, and Spain respond to requests for comment or announce further measures.德国、意大利和西班牙当局是否回应置评请求或宣布进一步措施。
Whether European cybersecurity agencies provide additional assessment of the exposed systems and their potential operational impact.欧洲网络安全机构是否会进一步评估这些暴露系统及其潜在运营影响。

05Uncertainties不确定因素

The reported rankings partly reflected where researchers could link internet-facing systems to specific sites, so they may not represent the full exposure in each country.报道中的排名部分取决于研究人员能够将面向互联网的系统关联到具体站点的地区，因此不一定代表各国全部暴露情况。
Researchers described full control as possible at around 181 sites, but the report did not state that those sites were actually compromised.研究人员称约181个站点可能被完全控制，但报道没有表示这些站点已经实际遭到入侵。
The European Union Agency for Cybersecurity and authorities in Germany, Italy, and Spain had not immediately commented.欧盟网络安全局以及德国、意大利和西班牙当局当时尚未立即置评。

06Sources信息来源

Thousands of European Wind, Solar Power Systems Exposed Online: Dutch Researchers - Insurance JournalThousands of European Wind, Solar Power Systems Exposed Online: Dutch Researchers - Insurance Journal insurancejournal.com · 2026-10-06

Share this analysis 分享此深度分析

X Facebook LinkedIn WhatsApp