Ethernet Cables as electrical connections grow

US Power Grid Cyberattacks target utilities and nuclear plants, probing SCADA, ICS, and business networks at sites like Wolf Creek; suspected Russian actors, malware, and spear-phishing trigger DHS and FBI alerts on critical infrastructure resilience.

Key Points

Intrusions on energy networks probing ICS and SCADA, seeking persistence and elevating risks to critical infrastructure.

✅ Wolf Creek nuclear plant targeted; no operational systems breached

✅ Attackers leveraged stolen credentials, malware, and spear-phishing

✅ DHS and FBI issued alerts; utilities enhance cyber resilience

Hackers working for a foreign government recently breached at least a dozen US power plants, including the Wolf Creek nuclear facility in Kansas, according to current and former US officials, sparking concerns the attackers were searching for vulnerabilities in the electrical grid.

The rivals could be positioning themselves to eventually disrupt the nation’s power supply, warned the officials, who noted that a general alert, prompting a renewed focus on protecting the U.S. power grid, was distributed to utilities a week ago. Adding to those concerns, hackers recently infiltrated an unidentified company that makes control systems for equipment used in the power industry, an attack that officials believe may be related.

The chief suspect is Russia, according to three people familiar with the continuing effort to eject the hackers from the computer networks. One of those networks belongs to an ageing nuclear generating facility known as Wolf Creek -- owned by Westar Energy Inc, Great Plains Energy Inc, and Kansas Electric Power Cooperative Inc -- on a lake shore near Burlington, Kansas.

The possibility of a Russia connection is particularly worrying, former and current official s say, because Russian hackers have previously taken down parts of the electrical grid in Ukraine and appear to be testing increasingly advanced tools, including cyber weapons to disrupt power grids, to disrupt power supplies.

The hacks come as international tensions have flared over US intelligence agencies’ conclusion that Russia tried to influence the 2016 presidential election, and amid U.S. government condemnation of Russian power-grid hacking in recent advisories. The US, which has several continuing investigations into Russia’s activities, is known to possess digital weapons capable of disrupting the electricity grids of rival nations.

“We don’t pay attention to such anonymous fakes,” Kremlin spokesman Dmitry Peskov said, in response to a request to comment on alleged Russian involvement.

It was unclear whether President Donald Trump was planning to address the cyber attacks at his meeting on Friday with Russian President Vladimir Putin. In an earlier speech in Warsaw, Trump called out Russia’s “destabilising activities” and urged the country to join “the community of responsible nations.”

The Department of Homeland Security and Federal Bureau of Investigation said they are aware of a potential intrusion in the energy sector. The alert issued to utilities cited activities by hackers since May.

“There is no indication of a threat to public safety, as any potential impact appears to be limited to administrative and business networks,” the government agencies said in a joint statement.

The Department of Energy also said the impact appears limited to administrative and business networks and said it was working with utilities and grid operators to enhance security and resilience.

“Regardless of whether malicious actors attempt to exploit business networks or operational systems, we take any reports of malicious cyber activity potentially targeting our nation’s energy infrastructure seriously and respond accordingly,” the department said in an emailed statement.

Representatives of the National Security Council, the Director of National Intelligence and the Nuclear Regulatory Commission declined to comment. While Bloomberg News was waiting for responses from the government, the New York Times reported that hacks were targeting nuclear power stations.

The North American Electric Reliability Corp, a nonprofit that works to ensure the reliability of the continent’s power system, said it was aware of the incident and was exchanging information with the industry through a secure portal.

“At this time, there has been no bulk power system impact in North America,” the corporation said in an emailed statement.

In addition, the operational controls at Wolf Creek were not pierced, according to government officials, even as attackers accessed utility control rooms elsewhere in the U.S., according to separate reports. “There was absolutely no operational impact to Wolf Creek,” Jenny Hageman, a spokeswoman for the nuclear plant, said in a statement to Bloomberg News.

“The reason that is true is because the operational computer systems are completely separate from the corporate network.”

Determining who is behind an attack can be tricky. Government officials look at the sophistication of the tools, among other key markers, when gauging whether a foreign government is sponsoring cyber activities.

Several private security firms, including Symantec researchers, are studying data on the attacks, but none has linked the work to a particular hacking team or country.

“We don’t tie this to any known group at this point,” said Sean McBride, a lead analyst for FireEye Inc, a global cyber security firm. “It’s not to say it’s not related, but we don’t have the evidence at this point.”

US intelligence officials have long been concerned about the security of the country’s electrical grid. The recent attack, striking almost simultaneously at multiple locations, is testing the government’s ability to coordinate an effective response among several private utilities, state and local officials, and industry regulators.

Specialised teams from Homeland Security and the FBI have been scrambled to help extricate the hackers from the power stations, in some cases without informing local and state officials. Meanwhile, the US National Security Agency is working to confirm the identity of the hackers, who are said to be using computer servers in Germany, Italy, Malaysia and Turkey to cover their tracks.

Many of the power plants are conventional, but the targeting of a nuclear facility adds to the pressure. While the core of a nuclear generator is heavily protected, a sudden shutdown of the turbine can trigger safety systems. These safety devices are designed to disperse excess heat while the nuclear reaction is halted, but the safety systems themselves may be vulnerable to attack.

Homeland Security and the FBI sent out a general warning about the cyber attack to utilities and related parties on June 28, though it contained few details or the number of plants affected. The government said it was most concerned about the “persistence” of the attacks on choke points of the US power supply. That language suggests hackers are trying to establish backdoors on the plants’ systems for later use, according to a former senior DHS official who asked not to be identified.

Those backdoors can be used to insert software specifically designed to penetrate a facility’s operational controls and disrupt critical systems, according to Galina Antova, co-founder of Claroty, a New York firm that specialises in securing industrial control systems.

“We’re moving to a point where a major attack like this is very, very possible,” Antova said. “Once you’re into the control systems -- and you can get into the control systems by hacking into the plant’s regular computer network -- then the basic security mechanisms you’d expect are simply not there.”

The situation is a little different at nuclear facilities. Backup power supplies and other safeguards at nuclear sites are meant to ensure that “you can’t really cause a nuclear plant to melt down just by taking out the secondary systems that are connected to the grid,” Edwin Lyman, a nuclear expert with the Union of Concerned Scientists, said in a phone interview.

The operating systems at nuclear plants also tend to be legacy controls built decades ago and don’t have digital control systems that can be exploited by hackers. Wolf Creek, for example, began operations in 1985. “They’re relatively impervious to that kind of attack,” Lyman said.

The alert sent out last week inadvertently identified Wolf Creek as one of the victims of the attack. An analysis of one of the tools used by the hackers had the stolen credentials of a plant employee, a senior engineer. A US official acknowledged the error was not caught until after the alert was distributed.

According to a security researcher who has seen the report, the malware that activated the engineer’s username and password was designed to be used once the hackers were already inside the plant’s computer systems.

The tool tries to connect to non-public computers, and may have been intended to identify systems related to Wolf Creek’s generation plant, a part of the facility typically more modern than the nuclear reactor control room, according to a security expert who asked to note be identified because the alert is not public.

Even if there is no indication that the hackers gained access to those control systems, the design of the malware suggests they may have at least been looking for ways to do so, the expert said.

Stan Luke, the mayor of Burlington, the largest community near Wolf Creek, which is surrounded by corn fields and cattle pastures, said he learned about a cyber threat at the plant only recently, and then only through golfing buddies.

With a population of just 2,700, Burlington boasts a community pool with three water slides and a high school football stadium that would be the envy of any junior college. Luke said those amenities lead back to the tax dollars poured into the community by Wolf Creek, Coffey County’s largest employer with some 1,000 workers, 600 of whom live in the county.

E&E News first reported on digital attacks targeting US nuclear plants, adding it was code-named Nuclear 17. A senior US official told Bloomberg that there was a bigger breach of conventional plants, which could affect multiple regions.

Industry experts and US officials say the attack is being taken seriously, in part because of recent events in Ukraine. Antova said that the Ukrainian power grid has been disrupted at least twice, first in 2015, and then in a more automated attack last year, suggesting the hackers are testing methods.

Scott Aaronson, executive director for security and business continuity at the Edison Electric Institute, an industry trade group, said utilities, grid operators and federal officials were already dissecting the attack on Ukraine’s electric sector to apply lessons in North America before the US government issued the latest warning to “energy and critical manufacturing sectors”. The current threat is unrelated to recently publicised ransomware incidents or the CrashOverride malware, Mr Aaronson said in an emailed statement.

Neither attack in Ukraine caused long-term damage. But with each escalation, the hackers may be gauging the world’s willingness to push back.

“If you think about a typical war, some of the acts that have been taken against critical infrastructure in Ukraine and even in the US, those would be considered crossing red lines,” Antova said.

Related News

• Electricity Forum News

• Grid Technologies News

Alberta Utility Rate Rider will add a modest fee to electricity bills and natural gas charges as the AUC recovers outstanding debt from the COVID-19 deferral program via AESO and the Balancing Pool.

Key Points

A temporary surcharge on Alberta power and gas bills to recover unpaid COVID-19 deferral debt, administered by the AUC.

✅ Applies per kWh and per GJ based on consumption

✅ Recovers unpaid balances from 2020-21 bill deferrals

✅ Collected via AESO and the Balancing Pool under AUC oversight

The province says Alberta ratepayers should expect to see an extra fee on their utility bills in the coming months.

That fee is meant to recover the outstanding debt owed to gas and electricity providers resulting from last year's three-month utility deferral program offered to struggling Albertans during the pandemic.

The provincial government announced the utility deferral program in March 2020 then formalized it with legislation, alongside a consumer price cap on power bills that shaped later policy decisions.

The program allowed residential, farm and small commercial customers who used less than 250,000 kilowatt hours of electricity per year — or consumed less than 2,500 gigajoules per year — to postpone their bills amid the COVID-19 pandemic.

According to the province, 350,000 customers, or approximately 13 per cent of the natural gas and electricity consumer base, took advantage of the program.

Customers had a year to repay providers what they owed. That deadline ended June 18, 2021.

The Alberta Utilities Commission (AUC), which regulates the utilities sector and natural gas and electricity markets and oversees a rate of last resort framework, said the vast majority of consumers have squared up.

But for those who didn't, provincial legislation dictates that Alberta ratepayers must cover any unpaid debt. The legislation exempts Medicine Hat utility customers for electricity and gas co-operative customers for gas.

"When the program was announced, it was very clear that it was a deferral program and that the monies would need to be paid back," said Geoff Scotton, a spokesperson with the Alberta Utilities Commission.

"Now we're in the situation where the providers, in good faith, who enabled those payment deferrals, need to be made whole. That's really the goal here."

Amount to be determined
Margeaux Maron, a spokesperson for Associate Minister of Natural Gas and Electricity Dale Nally, said based on early estimates, $13 to $16 million of $92 million in deferred payments remain outstanding.

As a result, the province expects the average Albertan will end up paying, unlike jurisdictions offering a lump-sum credit, a fraction of a dollar extra per monthly gas and electricity bill over a handful of months.

Scotton said at this point, there are too many unknown factors to know the exact size of the rate rider. However, he said he expects it to be modest.

Scotton said affected parties first have until the end of this week to notify the AUC exactly how much they are still owed.

Those parties include the Alberta Electric System Operator and the Balancing Pool, who essentially acted as bankers with respect to the distribution and transmission of the utilities to customers who deferred their payments.

Regulated service providers may also seek reimbursement on administrative and carrying costs, even as issues like a BC Hydro fund surplus spark debate elsewhere.

Then, Scotton said, once the outstanding amounts are known, the AUC will hold a public proceeding, similar to a Nova Scotia rate case, to determine the amount and the duration of the rate rider to be applied to each natural gas and electricity bill.

The amount will be based on consumption: per kilowatt hour for electricity and per gigajoule for natural gas.

That means larger businesses will end up paying more than the average Albertan.

Scotton said the AUC will expedite the hearing process and it expects to have a decision by the end of the summer.

Rate rider a 'surprise'
Joel MacDonald with Energyrates.ca — an organization which compares energy rates across the country — said it's not the amount of the rate rider that bothers him, but the fact that the repayment process wasn't made clear at the onset of the program.

"It came to us as a bit of a surprise," MacDonald said.

He said what was sold as a deferral program seems more like an electricity rebate program, or an "ability to pay" program.

"As opposed to the retailers looking into collection methods, anything that wasn't paid is basically just being forced upon all Alberta consumers," MacDonald said.

The expectation set out in the deferral legislation and regulations state utility providers such as Enmax and Epcor are expected to use reasonable efforts to try to collect the unpaid balances. It must then detail those reasonable efforts to the AUC.

A spokesperson for Enmax said it first works with its customers to find manageable payment arrangements and connects them with support services if they are unable to pay.

Then, if payment can't be arranged, it said it will work with a collection agency, which may even result in disconnection of service.

The spokesperson said only after all efforts have failed would Enmax seek reimbursement through this program.

Use tax revenues?
MacDonald also questioned why a government program isn't being paid for through general tax revenues.

He compared the utility deferral program to a mortgage subsidy program.

"Imagine that [Canada Mortgage And Housing Corporation] said, 'Hey, we had to give mortgage deferrals and some of these people never paid back their deferrals, so we're going to add an extra $300 to everyone's mortgage,'" he said.

"You'd expect that to come off of some sort of general taxation — not being assigned to other people's mortgages, right?"

In response, Maron said due to the current fiscal challenges facing the government — and the expected minimal costs to consumers, and even as a consumer price cap on electricity remains in place — it was determined that a rate rider would be an appropriate mechanism to repay bad debt associated with the program.

Scotton said rate riders aren't unusual — they're used to fine-tune rates for a set period of time.

He said under normal circumstances, regulated service providers can apply to the AUC to impose a rate rider to recover unexpected costs. And in some instances, they can provide a credit.

But in this situation, he said the debt is aggregated and, in turn, being collected more broadly.

Related News

• Electricity Forum News

• Energy Policy News

Nuclear Plant Climate Risks span flood risk, heat stress, and water scarcity, threatening operations, safety systems, and steam generation; resilience depends on mitigation investments, cooling-water management, and adaptive maintenance strategies.

Key Points

Climate-driven threats to nuclear plants: floods, heat, and water stress requiring resilience and mitigation.

✅ Flooding threats to safety and cooling systems

✅ Heat stress reduces thermal efficiency and output

✅ Water scarcity risks limit cooling capacity

Climate change can affect every aspect of nuclear plant operations like fuel handling, power and steam generation and the need for resilient power systems planning, maintenance, safety systems and waste processing, the credit rating agency said.

However, the ultimate credit impact will depend upon the ability of plant operators to invest in carbon-free electricity and other mitigating measures to manage these risks, it added.
Close proximity to large water bodies increase the risk of damage to plant equipment that helps ensure safe operation, the agency said in a note.

Moody’s noted that about 37 gigawatts (GW) of U.S. nuclear capacity is expected to have elevated exposure to flood risk and 48 GW elevated exposure to combined rising heat, extreme heat costs and water stress caused by climate change.

Parts of the Midwest and southern Florida face the highest levels of heat stress, while the Rocky Mountain region and California face the greatest reduction in the availability of future water supply, illustrating the need for adapting power generation to drought strategies, it said.

Nuclear plants seeking to extend their operations by 20, or even 40 years, beyond their existing 40-year licenses in support of sustaining U.S. nuclear power and decarbonization face this climate hazard and may require capital investment adjustments, Moody’s said, as companies such as Duke Energy climate report respond to investor pressure for climate transparency.

“Some of these investments will help prepare for the increasing severity and frequency of extreme weather events, highlighting that the US electric grid is not designed for climate impacts today.”

Related News

• Electricity Forum News

• Climate Change News

BC Autonomous Vehicle Ban freezes new driverless testing and deployment as BC develops a regulatory framework, prioritizing safety, liability clarity, and road sharing with pedestrians and cyclists while existing pilot projects continue.

Key Points

A moratorium pausing new driverless testing until a safety-first regulatory framework and clear liability rules exist.

✅ Freezes new AV testing and deployment provincewide

✅ Current pilot shuttles continue under existing approvals

✅ Focus on safety, liability, and road-user integration

British Columbia has halted the expansion of fully autonomous vehicles on its roads. The province has announced it will not approve any new applications for testing or deployment of vehicles that operate without a human driver until it develops a new regulatory framework, even as it expands EV charging across the province.

Safety Concerns and Public Questions

The decision follows concerns about the safety of self-driving vehicles and questions about who would be liable in the event of an accident. The BC government emphasizes the need for robust regulations to ensure that self-driving cars and trucks can safely share the road with traditional vehicles, pedestrians, and cyclists, and to plan for infrastructure and power supply challenges associated with electrified fleets.

"We want to make sure that British Columbians are safe on our roads, and that means putting the proper safety guidelines in place," said Rob Fleming, Minister of Transportation and Infrastructure. "As technology evolves, we're committed to developing a comprehensive framework to address the issues surrounding self-driving technology."

What Does the Ban Mean?

The ban does not affect current pilot projects involving self-driving vehicles that already operate in BC, such as limited shuttle services and segments of the province's Electric Highway that support charging and operations.

Industry Reaction

The response from industry players working on autonomous vehicle technology has been mixed, amid warnings of a potential EV demand bottleneck as adoption ramps up. While some acknowledge the need for clear regulations, others express concern that the ban could stifle innovation in the province.

"We understand the government's desire to ensure safety, but a blanket ban risks putting British Columbia behind in the development of this important technology," says a spokesperson for a self-driving vehicle start-up.

Debate Over Self-Driving Technology

The BC ban highlights a larger debate about the future of autonomous vehicles. While proponents point to potential benefits such as improved safety, reduced traffic congestion, and increased accessibility, and national policies like Canada's EV goals aim to accelerate adoption, critics raise concerns about liability, potential job losses in the transportation sector, and the ability of self-driving technology to handle complex driving situations.

BC Not Alone

British Columbia is not the only jurisdiction grappling with the regulation of self-driving vehicles. Several other provinces and states in both Canada and the U.S. are also working to develop clear legal and regulatory frameworks for this rapidly evolving technology, even as studies suggest B.C. may need to double its power output to fully electrify road transport.

The Road Ahead

The path forward for fully autonomous vehicles in BC depends on the government's ability to create a regulatory framework that balances safety considerations with fostering innovation, and align with clean-fuel investments like the province's hydrogen project to support zero-emission mobility.  When and how that framework will materialize remains unclear, leaving the future of self-driving cars in the province temporarily uncertain.

Related News

• Electricity Forum News

• EV Infrastructure News

Meaford Pumped Storage Project aims to balance the grid with hydro-electric generation, a hilltop reservoir, and transmission lines near Georgian Bay, pending environmental assessment, permitting, and federal review of impacts on fish and drinking water.

Key Points

TC Energy proposal to pump water uphill off-peak and generate 1,000 MW at peak, pending studies and approvals.

✅ Balances grid by storing off-peak energy and generating at peak.

✅ Requires reservoir, break wall, transmission lines, generating station.

✅ Environmental studies and federal review underway before approvals.

Plans for a $3.3 billion hydro-electric project in Meaford are still in the early study stages, but some residents have concerns about what it might mean for the environment, as past Site C stability issues have illustrated for large hydro projects.

A one-year permit was granted for TC Energy Corporation (TC Energy) to begin studies on the proposed location back in May, and cross-border projects like the New England Clean Power Link require federal permits as well to proceed. Local municipalities were informed of the project in June.

TC Energy is proposing to have a pumped storage project at the 4th Canadian Division Training (4CDTC) Meaford property, which is on federal lands.

A letter sent to local municipalities explains that the plan is to balance supply and demand on the electrical grid by pumping water uphill during off-peak hours. It would then release the water back into Georgian Bay during peak periods, generating up to 1,000 megawatts of electricity.

The project is expected to create 800 jobs over four years of construction, in addition to long-term operational positions.

According to the company's website, the proposed pump station would require a large reservoir on the military base, a generating station, transmission lines infrastructure, and a break wall 850 metres from shore.

Some residents fear the project will threaten the bay and the fish, echoing Site C dam concerns shared with northerners, and the region's drinking water.

Meaford's mayor says the town has no jurisdiction on federal lands, but that a list of concerns has been forwarded to the company, while Ontario First Nations have urged government action on urgent transmission needs elsewhere.

TC Energy will tackle preliminary engineering and environmental studies to determine the feasibility of the proposed location, which could take up to two years.

Once the assessments are done, they need to be presented to the government for further review and approval, as seen when Ottawa's Site C stance left work paused pending a treaty rights challenge.

TC Energy's website states that the company anticipates construction to begin in 2022 if it gets all the go-ahead, with the plant to begin operations four years later.

Input from residents is being collected until April 2020, similar to when the National Energy Board heard oral traditional evidence on the Manitoba-Minnesota transmission line.

Related News

• Electricity Forum News

• Overhead T&D News

Siwash Creek Hydroelectric Project faces downsizing under a BC Hydro power purchase agreement, with run-of-river generation, high grid interconnection costs, First Nations partnership, and surplus electricity from Site C reshaping clean energy procurement.

Key Points

A downsized run-of-river plant in BC, co-owned by Kanaka Bar and Green Valley, selling power via a BC Hydro PPA.

✅ Approved at 500 kW under a BC Hydro clean-energy program

✅ Grid interconnection initially quoted at $2.1M

✅ Joint venture: Kanaka Bar and Green Valley Power

A small run-of-river hydroelectric project recently selected by B.C. Hydro for a power purchase agreement may no longer be financially viable.

The Siwash Creek project was originally conceived as a two-megawatt power plant by the original proponent Chad Peterson, who holds a 50-per-cent stake through Green Valley Power, with the Kanaka Bar Indian Band holding the other half.

The partners were asked by B.C. Hydro to trim the capacity back to one megawatt, but by the time the Crown corporation announced its approval, it agreed to only half that — 500 kilowatts — under its Standing Order clean-energy program.

“Hydro wanted to charge us $2.1 million to connect to the grid, but then they said they could reduce it if we took a little trim on the project,” said Kanaka Bar Chief Patrick Michell.

The revenue stream for the band and Green Valley Power has been halved to about $250,000 a year. The original cost of running the $3.7-million plant, including financing, was projected to be $273,000 a year, according to the Kanaka Bar economic development plan.

“By our initial forecast, we will have to subsidize the loan for 20 years,” said Michell. “It doesn’t make any sense.”

The Kanaka Band has already invested $450,000 in feasibility, hydrology and engineering studies, with a similar investment from Green Valley.

B.C. Hydro announced it would pursue five purchase agreements last March with five First Nations projects — including Siwash Creek — including hydro, solar and wind energy projects, as two new generating stations were being commissioned at the time. A purchase agreement allows proponents to sell electricity to B.C. Hydro at a set price.

However, at least ten other “shovel-ready” clean energy projects may be doomed while B.C. Hydro completes a review of its own operations and its place in the energy sector, where legal outcomes like the Squamish power project ruling add uncertainty, including B.C.’s future power needs.

With the 1,100-megawatt Site C Dam planned for completion in 2024, and LNG demand cited to justify it, B.C. Hydro now projects it will have a surplus of electricity until the early 2030s.

Even if British Columbians put 300,000 electric vehicles on the road over the next 12 years, amid BC Hydro’s first call for power, they will require only 300 megawatts of new capacity, the company said.

A long-term surplus could effectively halt all small-scale clean energy development, according to Clean Energy B.C., even as Hydro One’s U.S. coal plant remains online in the region.

“(B.C. Hydro) dropped their offer down to 500 kilowatts right around the time they announced their review,” said Michell. “So we filled out the paperwork at 500 kilowatts and (B.C. Hydro) got to make its announcement of five projects.”

In the new few weeks, Kanaka and Green Valley will discuss whether they can move forward with a new financial model or shelve the project, he said.

B.C. Hydro declined to comment on the rationale for downsizing Siwash Creek’s power purchase agreement.

The Kanaka Bar Band successfully operates a 49.9-megawatt run-of-river plant on Kwoiek Creek with partners Innergex Renewable Energy.

Related News

• Electricity Forum News

• Power Generation News