Zapped rat causes Stockholm power outage

Russian Utility Grid Cyberattacks reveal DHS findings on Dragonfly/Energetic Bear breaching control rooms and ICS/SCADA via vendor supply-chain spear-phishing, threatening blackouts and critical infrastructure across U.S. power utilities through stolen credentials and reconnaissance.

Key Points

State-backed ops breaching utilities via vendors to reach ICS/SCADA, risking grid disruption and control-room access.

✅ Spear-phishing and watering-hole attacks on vendor networks

✅ Stolen credentials used to reach isolated ICS/SCADA

✅ Potential to trigger localized blackouts and service disruptions

Hackers working for Russia were able to gain access to the control rooms of US electric utilities last year, allowing them to cause blackouts, federal officials tell the Wall Street Journal.

The hackers -- working for a state-sponsored group previously identified as Dragonfly or Energetic Bear -- broke into utilities' isolated networks by hacking networks belonging to third-party vendors that had relationships with the power companies, the Department of Homeland Security said in a press briefing on Monday.

Officials said the campaign had claimed hundreds of victims and is likely continuing, the Journal reported.

"They got to the point where they could have thrown switches" to disrupt the flow power, Jonathan Homer, chief of industrial-control-system analysis for DHS, told the Journal.

"While hundreds of energy and non-energy companies were targeted, the incident where they gained access to the industrial control system was a very small generation asset that would not have had any impact on the larger grid if taken offline," the DHS said in a statement Tuesday. "Over the course of the past year as we continued to investigate the activity, we learned additional information which would be helpful to industry in defending against this threat."

Organizations running the nation's energy, nuclear and other critical infrastructure have become frequent targets for cyberattacks in recent years due to their ability to cause immediate chaos, whether it's starting a blackout or blocking traffic signals. These systems are often vulnerable because of antiquated software and the high costs of upgrading infrastructure.

The report comes amid heightened tension between Russia and the US over cybersecurity, alongside US condemnation of power grid hacking in recent months. Earlier this month, US special counsel Robert Mueller filed charges against 12 Russian hackers tied to cyberattacks on the Democratic National Committee.

Hackers compromised US power utility companies' corporate networks with conventional approaches, such as spear-phishing emails and watering-hole attacks as seen in breaches at power plants across the US that target a specific group of users by infecting websites they're known to visit, the newspaper reported. After gaining access to vendor networks, hackers turned their attention to stealing credentials for access to the utility networks and familiarizing themselves with facility operations, officials said, according to the Journal.

Homeland Security didn't identify the victims, the newspaper reports, adding that some companies may not know they had been compromised because the attacks used legitimate credentials to gain access to the networks.

Cyberattacks on electrical systems aren't an academic matter. In 2016, Ukraine's grid was disrupted by cyberattacks attributed to Russia, which is engaged in territorial disputes with the country over eastern Ukraine and the Crimean peninsula. Russia has denied any involvement in targeting critical infrastructure.

President Donald Trump signed an executive order in May designed to bolster the United States' cybersecurity by protecting federal networks, critical infrastructure and the public online. One section of the order focuses on protecting the grid like electricity and water, as well as financial, health care and telecommunications systems.

The Department of Homeland Security didn't respond to a request for comment.

Related News

• Electricity Forum News

• Grid Technologies News

Canadian Industrial IoT Cybersecurity Standards aim to unify device security for utilities, smart grids, SCADA, and OT systems, aligning with NERC CIP, enabling certification, trust marks, compliance testing, and safer energy sector deployments.

Key Points

National standards to secure industrial IoT for utilities and grids, enabling certification and NERC CIP alignment.

✅ Aligns with NERC CIP and NIST frameworks for energy sector security

✅ Defines certification, testing tools, and a trusted device repository

✅ Enhances OT, SCADA, and smart grid resilience against cyber threats

The Canadian energy sector has been buying Internet-connected sensors for monitoring a range of activities in generating plants, distribution networks facing harsh weather risks and home smart meters for several years. However, so far industrial IoT device makers have been creating their own security standards for devices, leaving energy producers and utilities at their mercy.

The industry hopes to change that by creating national cybersecurity standards for industrial IoT devices, with the goal of improving its ability to predict, prevent, respond to and recover from cyber threats, such as emerging ransomware attacks across the grid.

To help, the federal government today announced an $818,000 grant support a CIO Strategy Council project oversee the setting of standards.

In an interview council executive director Keith Jansa said the money will help a three-year effort that will include holding a set of cross-country meetings with industry, government, academics and interest groups to create the standards, tools to be able to test devices against the standards and the development of product repository of IoT safe devices companies can consult before making purchases.

“The challenge is there are a number of these devices that will be coming online over the next few years,” Jansa said. “IoT devices are designed for convenience and not for security, so how do you ensure that a technology an electricity utility secures is in fact safeguarded against cyber threats? Currently, there is no associated trust mark or certification that gives confidence associated with these devices.”

He also said the council will work with the North American Electric Reliability Corporation (NERC), which sets North American-wide utility safety procedural standards and informs efforts on protecting the power grid across jurisdictions. The industrial IoT standards will be product standards.

According to Robert Wong, vice-president and CIO of Toronto Hydro, all the big provincial utilities are subject to adhering to NERC CIP standards which have requirements for both cyber and physical security. Ontario is different from most provinces in that it has local distribution companies — like Toronto Hydro — which buy electricity in bulk and resell it to customers.  These LDCs don’t own or operate critical infrastructure and therefore don’t have to follow the NERC CIP standards.

Regional reforms, such as regulatory changes in Atlantic Canada, aim to bring greener power options to the grid.

Electricity is considered around the world as one of a country’s critical national infrastructure. Threats to the grid can be used for ransom or by a country for political pressure. Ukraine had its power network knocked offline in 2015 and 2016 by what were believed to be Russian-linked attackers operating against utilities.

All the big provincial utilities operate “critical infrastructure” and are subject to adhering to NERC CIP (critical infrastructure protection) standards, which have requirements for both cyber and physical security, as similar compromises at U.S. electric utilities have highlighted recently.  There are audited on a regular basis for compliance and can face hefty fines if they fail to meet the requirements.  The LDCs in Ontario don’t own or operate “critical infrastructure” and therefore are not required to adopt NERC CIP standards (at least for now).

The CIO Strategy Council is a forum for chief information officers that is helping set standards in a number of areas. In January it announced a partnership with the Internet Society’s Canada Chapter to create standards of practice for IoT security for consumer devices. As part of the federal government’s updated national cybersecurity strategy it is also developing a national cybersecurity standard for small and medium-sized businesses. That strategy would allow SMBs to advertise to customers that they meet minimum security requirements.

“The security of Canadians and our critical infrastructure is paramount,” federal minister of natural resources Seamus O’Regan said in a statement with today’s announcement. “Cyber attacks are becoming more common and dangerous. That’s why we are supporting this innovative project to protect the Canadian electricity sector.”

The announcement was welcomed by Robert Wong, Toronto Hydro’s vice-president and CIO. “Any additional investment towards strengthening the safeguards against cyberattacks to Canada’s critical infrastructure is definitely good news.  From the perspective of the electricity sector, the convergence of IT and OT (operational technology) has been happening for some time now as the traditional electricity grid has been transforming into a Smart Grid with the introduction of smart meters, SCADA systems, electronic sensors and monitors, smart relays, intelligent automated switching capabilities, distributed energy resources, and storage technologies (batteries, flywheels, compressed air, etc.).

“In my experience, many OT device and system manufacturers and vendors are still lagging the traditional IT vendors in incorporating Security by Design philosophies and effective security features into their products.  This, in turn, creates greater risks and challenges for utilities to protecting their critical infrastructures and ensuring a reliable supply of electricity to its customers.”

The Ontario Energy Board, which regulates the industry in the province, has led an initiative for all utilities to adopt the National Institute of Standards and Technology (NIST) Cybersecurity Framework, along with the ES-C2M2 maturity and Privacy By Design models, he noted.  Toronto Hydro has been managing its cybersecurity practice in adherence to these standards, as the city addresses growing electricity needs as well, he said.

“Other jurisdictions, such as Israel, have invested heavily on a national level in developing its cybersecurity capabilities and are seen as global leaders.  I am confident that given the availability of talent, capabilities and resources in Canada (especially around the GTA) if we get strong support and leadership at a federal level we can also emerge as a leader in this area as well.”

Related News

• Electricity Forum News

• Grid Technologies News

Site C Dam Injunction signals Ottawa's neutrality while B.C. reviews a hydroelectric dam project on the Peace River, amid First Nations treaty rights claims, federal approval defenses, and scrutiny of environmental assessment and Crown consultation.

Key Points

A legal request to pause Site C while courts weigh First Nations treaty rights, environmental review, and approvals.

✅ Ottawa neutral on injunction; still defends federal approvals

✅ First Nations cite treaty rights over Peace River territory

✅ B.C. jurisdiction, environmental assessment and Crown consultation at issue

The federal government is not going to argue against halting construction of the controversial Site C hydroelectric dam in British Columbia while a B.C. court decides if the project violates constitutionally protected treaty rights.

Work on Site C suspended prior to First Nations lawsuit

However a spokeswoman for Environment Minister Catherine McKenna said Monday the government will continue to defend the federal approval given for the project in December 2014, even though that approval was given using an environmental review process McKenna herself has said is fundamentally flawed.

The Site C project is an 1,100-megawatt dam and generating station on the Peace River in northern B.C. that will flood parts of the traditional territory of the West Moberly and Prophet River First Nations.

#google#

In January, they filed a civil court case against the provincial government, B.C. Hydro and the federal government asking a judge to decide if their rights were being violated by the dam. A few weeks later, West Moberly asked the court for an injunction to halt construction pending the outcome of the rights case, similar to other contested transmission projects like the Maine electricity corridor debate in New England.

On May 11, lawyers for Attorney General Jody Wilson-Raybould filed a notice that Canada would remain neutral on the question of the injunction, meaning Canada won't argue against the idea of postponing construction for months, if not years, while the rights case winds through the court.

Wilson-Raybould has been silent on Site C since being named Canada's minister of justice in 2015, but in 2012, when she was the B.C. regional chief for the Assembly of First Nations, she said the project was "running roughshod" over treaty rights. The Justice Department on Monday directed questions to Environment and Climate Change Canada.

Defence of environmental assessment

McKenna's spokeswoman, Caroline Theriault, said the injunction request is just a procedural step regarding construction and that it is B.C. jurisdiction not federal.

However, she said Canada will defend the environmental assessment and Crown consultation processes and the federally issued permits required for construction.

B.C. auditor general set to scrutinize Site C dam project

McKenna has legislation before the House of Commons to overhaul the process for environmental assessment of major projects like hydro dams and pipelines, arguing the former government's procedures had skewed too far towards proponents. The overhaul includes requiring traditional Indigenous knowledge be taken into account, a consideration also central to the Columbia River Treaty talks underway on both sides of the border.

However, Theriault said the commitment to overhaul the process also included a promise not to revisit projects that had already been approved, such as Site C.

"The federal environmental assessment process for the Site C project has already been upheld in other court actions," said Theriault.

'It feels kind of odd'

West Moberly Chief Roland Wilson said he was both excited and yet concerned by Canada's decision last week not to oppose the injunction.

"It feels kind of odd and makes me wonder what they're up to," Wilson said.

However he said all he has ever wanted was for the project to be stopped until the question of rights can be answered. Wilson said two previous dams on the Peace River already flooded 80 per cent of the functional land within West Moberly's territory and that Site C will flood half of what's left. That land is used for fishing and hunting and there is also concern the dam will allow mercury to leak into Moberly Lake, he said.

Retiree undaunted by steep odds against his petition to stop Site C dam

Construction began in 2015 and more than $2.4 billion has already been spent on a project that will at the earliest, not be completed until 2024 and will cost an estimated $10 billion total, with cost overrun risks underscored by the Muskrat Falls ratepayer agreement in Atlantic Canada.

The province continues to argue against the injunction and will also fight the rights case, even as Alberta suspends power purchase talks with B.C. over energy disputes. Premier John Horgan campaigned on a promise to review the Site C approval. A B.C. Utilities Commission report in November found there are alternatives to building it and that it will go over budget. Nevertheless Horgan in December said he had to let construction continue because cancelling the project would be too costly both for the province and its electricity consumers, despite the B.C. rate freeze announced around the same period.

Related News

• Electricity Forum News

• Overhead T&D News

PG&E dividend halt for wildfire mitigation directs cash from shareholders to tree clearing, wildfire risk reduction, and probation compliance under Judge William Alsup, amid bankruptcy, Camp Fire liabilities, and power line vegetation management mandates.

Key Points

A court-ordered dividend halt funding vegetation clearance and wildfire mitigation as PG&E meets probation terms.

✅ Judge Alsup bars dividends until mitigation targets met

✅ 375,000 trees cleared near power lines in high-risk zones

✅ Measures tied to probation amid bankruptcy and liabilities

A U.S. judge said on Tuesday that PG&E may not resume paying dividends and must use the money to fund its plan for cutting down trees to reduce the risk of wildfires in California, stopping short of more costly measures he proposed earlier this year.

The new criminal probation terms for PG&E are modest compared with ones the judge had in mind in January and that PG&E said could have cost upwards of $150 billion.

The terms will, however, keep PG&E under the supervision of Judge William Alsup of the U.S. District Court for the Northern District of California and hold the company, which also is in Chapter 11 bankruptcy and whose bankruptcy plan has drawn support from wildfire victims, to its target for clearing areas around its power lines of some 375,000 trees this year.

PG&E's probation stems from its felony conviction after a deadly 2010 natural gas pipeline blast in San Bruno, California, near San Francisco, that killed eight people and injured 58 others.

PG&E filed for bankruptcy protection on Jan. 29 in anticipation of liabilities from wildfires, including a catastrophic 2018 blaze, the Camp Fire, for which PG&E later pleaded guilty to 85 counts in state court. It killed 86 people in the deadliest and most destructive wildfire in California history.

At a January hearing, Alsup, who is overseeing PG&E's probation, said he felt compelled to propose additional probation terms in the aftermath of Camp Fire. San Francisco-based PG&E expects its equipment will be found to have caused the blaze.

The probation process is separate from San Francisco-based PG&E's bankruptcy filing and from operational measures such as its pandemic response and shutoff moratorium implemented to protect customers.

As the company faces $30 billion in wildfire liabilities and bankruptcy proceedings and has opened a wildfire assistance program for affected residents, the energy company is expected to name as its new chief executive Bill Johnson, a source said on Tuesday. Johnson has been the CEO of the Tennessee Valley Authority since 2013 and is retiring on Friday.

Additional probation terms imposed by Alsup on Tuesday will require PG&E to meet goals in a wildfire mitigation plan it unveiled in February.

The goals include removing 375,000 dead, dying or hazardous trees from areas at high risk of wildfires in 2019, compared with 160,000 last year.

The judge said PG&E will not be able to pay shareholders until it complies with his new probation terms.

Shares fell 2% on Tuesday to close at $17.66 on the New York Stock Exchange and are down 63% since November 2018 due to concerns about the company's bankruptcy and wildfire liabilities, though the utility has said rates are set to stabilize in 2025 as part of its long-term plan. The shares traded as low as $5.07 in January.

PG&E in December 2017 suspended its quarterly cash dividend, while continuing to pay significant property taxes to California counties, citing uncertainty about liabilities from wildfires in October of that year that struck Northern California.

PG&E paid $798 million in dividends in 2017 and $925 million in 2016, a period in which the company did a poor job of clearing areas around its power lines of hazardous trees, according to Alsup.

Money meant for shareholders should have been spent on efforts to reduce wildfire risks in recent years, Alsup said at Tuesday's hearing.

"PG&E has started way more than its share of these fires," Alsup said.

"I want to see the people of California safe," the judge added.

Lawyers for PG&E did not contest the new terms, which the company considers more feasible than terms Alsup proposed in January.

To comply with the terms Alsup proposed in January, PG&E said it would have to remove 100 million trees. The company added that shutting power lines during high winds as Alsup proposed would not be feasible because the lines traverse rural areas to service cities and suburbs.

Idling lines could also affect the power grid in other states, PG&E said.

Alsup on Tuesday said he was still considering his proposal to require PG&E to shut down power lines during windy weather to prevent tree branches from making contact and sparking wildfires linked to power lines in the region.

Related News

• Electricity Forum News

• Energy Policy News

Yukon Electricity Demand Record underscores peak load growth as winter cold snaps drive heating, lighting, and EV charging, blending hydro, LNG, and diesel with renewable energy and planned grid-scale battery storage in Whitehorse.

Key Points

It is the territory's new peak electricity load, reflecting winter demand, electric heating, EVs, and mixed generation.

✅ New peak: 104.42 MW, surpassing 2020 record of 103.84 MW

✅ Winter peaks met with hydro, LNG, diesel, and renewables mix

✅ Customers urged to shift use off peak hours and use timers

A new record for electricity demand has been set in Yukon. The territory recorded a peak of 104.42 megawatts, according to a news release from Yukon Energy.

The new record is about a half a megawatt higher than the previous record of 103.84 megawatts recorded on Jan. 14, 2020.

While in general, over 90 per cent of the electricity generated in Yukon comes from renewable resources each year, with initiatives such as new wind turbines expanding capacity, during periods of high electricity use each winter, Yukon Energy has to use its hydro, liquefied natural gas and diesel resources to generate the electricity, the release says.

But when it comes to setting records, Andrew Hall, CEO of Yukon Energy, says it's not that unusual.

"Typically, during the winter, when the weather is cold, demand for electricity in the Yukon reaches its maximum. And that's because folks use more electricity for heating their homes, for cooking meals, there's more lighting demand, because the days are shorter," he said.

"It usually happens either in December or sometimes in January, when we get a cold snap."

He said generally over the years, electricity demand has grown.

"We get new home construction, construction of new apartment buildings. And typically, those new homes are all heated by electricity, maybe not all of them but the majority," Hall said.

Vuntut Gwitchin First Nation's solar farm now generating electricity
In taking action on climate, this Arctic community wants to be a beacon to the world

Efforts to curb climate change add to electricity demand
There are also other reasons, ones that are "in the name of climate change," Hall added.

That includes people trying to limit fossil fuel heating by swapping to electric heating. And, he said some Yukoners are switching to electric vehicles as incentives expand across the North.

"Over time, those two new demands, in the name of climate change, will also contribute to growing demand for electricity," he said.

While Yukon did reach this new all time high, Hall said the territory still hadn't hit the maximum capacity for the week, which was 118 megawatts, and discussions about a potential connection to the B.C. grid are part of long-term planning.

Yukon Energy's hydroelectric dam in Whitehorse. Yukon Energy's CEO, Andrew Hall, said demand of 104 megawatts wasn't unexpected, nor was it an emergency. The corporation has the ability to generate 118 megawatts. (Paul Tukker/CBC)
Tips to curve demand
"When we plan our system, we actually plan for a scenario, guided by the view that sustainability is key to the grid's future, where we actually lose our largest hydro generating facility," Hall said.

"We had plenty of generation available so it wasn't an emergency situation, and, even as other provinces face electricity shortages, it was more just an observation that hey, our peaks are growing."

He also said it was an opportunity to reach out to customers on ways to curve their demand for electricity around peak times, drawing on energy efficiency insights from other provinces, which is typically between 7 a.m. and 9 a.m., and between 5 p.m. and 7 p.m., Monday to Friday.

For example, he said, people should consider running major appliances, like dishwashers, during non-peak hours, such as in the afternoon rather than in the morning or evening.

During winter peaks, people can also use a block heater timer on vehicles and turn down the thermostat by one or two degrees.

'We plan for each winter'
Hall said Yukon Energy is working to increase its peak output, including working on a large grid scale battery to be installed in Whitehorse, similar to Ontario's energy storage push now underway. 

When it comes to any added load from people working from home due to COVID-19, Hall said they haven't noticed any identifiable increase there.

"Presumably, if someone's working from home, you know, their computer is at home, and they're not using the computer at the office," he said.

Yukon Energy one step closer to having largest battery storage site in the North
He said there shouldn't be any concern for maxing out the capacity of electricity demand as Yukon moves into the colder winter months, since those days are forecast for.

"This number of 104 megawatts wasn't unexpected," he said, adding how much electricity is needed depends on the weather too.

"We plan for each winter."

Related News

• Electricity Forum News

• Power Generation News

25% Tariff on Canadian Imports threatens New York energy markets, disrupting hydroelectric power and natural gas supply chains, raising electricity prices, increasing gas costs, and intensifying trade tensions, policy uncertainty, and cross-border logistics risks.

Key Points

A U.S. policy imposing 25% duties on Canadian goods, risking higher New York electricity and natural gas costs.

✅ Hydroelectric and gas imports face costlier cross-border flows

✅ Higher utility bills for NY households and businesses

✅ Supply chain volatility and policy uncertainty increase

President Donald Trump announced the imposition of a 25% tariff on all imports from Canada, citing concerns over drug trafficking and illegal immigration. This decision has raised significant concerns among experts and residents in New York, who warn that the tariff could lead to increased electricity and gas prices in the state.

Impact on New York's Energy Sector

New York relies heavily on energy imports from Canada, particularly electricity and natural gas. Canada is a major supplier of hydroelectric power to the northeastern United States, including New York, with its electricity exports at risk amid trade tensions. The imposition of a 25% tariff on Canadian goods could disrupt this supply chain, leading to higher energy costs for consumers and businesses in New York. Justin Wilcox, an energy analyst, stated, "If the tariff is implemented, it could lead to increased costs for electricity and gas, affecting both consumers and businesses."

Potential Economic Consequences

The increased energy costs could have broader economic implications for New York, and some experts advise against cutting Quebec's exports to avoid exacerbating market volatility. Higher electricity and gas prices may lead to increased operational costs for businesses, potentially resulting in higher prices for goods and services, while tariff threats have boosted support for Canadian energy projects that could reshape regional supply. This could exacerbate the cost-of-living challenges faced by residents and strain the state's economy.

Political and Diplomatic Reactions

The tariff has also sparked political and diplomatic reactions, including threats to cut U.S. electricity exports from Ontario that raised tensions. New York Governor Kathy Hochul expressed concern over the potential economic impact, stating, "We are closely monitoring the situation and are prepared to take necessary actions to protect New York's economy." Additionally, Canadian officials have expressed their disapproval of the tariff, and Ontario Premier Doug Ford's Washington meeting underscored ongoing discussions, emphasizing the importance of the trade relationship between the two countries.

Historical Context

This development is part of a broader pattern of trade tensions between the United States and its neighbors. In 2018, the U.S. imposed tariffs on Canadian steel and aluminum, leading to retaliatory measures from Canada. The current situation underscores the ongoing challenges in international trade relations, where a recent tariff threat delayed Quebec's green energy bill and highlighted the potential domestic impacts of such policies.

The imposition of a 25% tariff on Canadian imports by President Trump has raised significant concerns in New York regarding potential increases in electricity and gas prices. Experts warn that this could lead to higher costs for consumers and businesses, with broader economic implications for the state. As the situation develops, it will be crucial to monitor the responses from both state and federal officials, as well as how Canadians support tariffs on energy and minerals may influence policy, and the potential for diplomatic negotiations to address these trade tensions.

Related News

• Electricity Forum News

• Energy Policy News