8,547 wind and solar park systems across Europe are exposed on the internet, Modat finds
Internet intelligence firm Modat identified 8,547 internet-exposed systems it could confirm belong to wind farms and solar parks in 35 countries across the EU, EFTA and EU candidate states, some of them management interfaces for single turbines or whole wind farms. Modat says the real number is higher and has notified affected parties through national CERTs.
Modat presented the research, "To See the Wind and the Sun", written with Bouke van Laethem, at The ONE Conference in The Hague on October 6. By clustering internet-wide scan data, it mapped every operating wind farm and solar park in the EU, EFTA and EU candidate countries, then looked for the systems behind them that anyone can reach from the internet. It found 8,547 exposed systems it could confirm belong to solar parks and wind farms, across 35 countries, and says that is only what it could attribute so far.
The exposure goes well beyond data. Some of the systems are the management interface of a single turbine; others sit one level higher and control several turbines, or a whole farm, from one screen. Modat argues that AI now lets anyone, defenders and attackers alike, map that attack surface in hours.
Renewables generated 54% of the EU's electricity in the second quarter of 2026, and their physical dispersal makes them hard to attack with drones or sabotage, but, Modat notes, that offers no protection online. It publishes only aggregated per-country figures, has notified affected parties through national CERTs, and offers operators and CERTs access to the data for remediation.