Astralux educates clients on solar-energy systems

NERC COVID-19 Grid Security Alert urges utilities to update business continuity plans, assess supply chain risk, and harden cybersecurity against spearphishing, social engineering, and remote-work vulnerabilities to protect the U.S. power grid and critical infrastructure.

Key Points

A notice urging U.S. utilities to fortify pandemic continuity, secure supply chains, and enhance cybersecurity.

✅ Mandates updates to business continuity and pandemic readiness plans

✅ Flags supply chain risks for PPE, electronics, chemicals, and logistics

✅ Warns of spearphishing, social engineering, VPN and remote-work threats

The top U.S. grid security monitor urged power utilities to prepare for the new coronavirus in a rare alert yesterday, adding to a chorus of warnings from federal and private organizations.

The North American Electric Reliability Corp. called for power providers to update business continuity plans in case of a pandemic outbreak and weigh the need to prioritize construction or maintenance projects, including updates on major projects like BC Hydro's Site C, while the COVID-19 virus continues to spread.

NERC is requiring electric utilities to answer questions on their readiness for a possible pandemic, including potential staffing strategies such as on-site sequestering, by March 20, an unusual step that underscores the severity of the threat to U.S. power systems.

The Electricity Information Sharing and Analysis Center, NERC's hub for getting the word out on dangers and vulnerabilities for the grid, also sent out an "all-points bulletin" on Feb. 5 addressing the coronavirus outbreak. That nonpublic document covered "potential supply chain issues stemming from a manufacturing slowdown in Asia," NERC spokeswoman Kimberly Mielcarek said.

Among offering basic hygiene and awareness recommendations, NERC's latest alert also encourages utilities to take stock of resources with supply chains affected by the virus. Because "China and nearby southeast Asian nations" have been impacted, NERC said, the supply chain hits will likely include "electronics, personal protective equipment and sanitation supplies, chemicals, and raw materials." The nonprofit grid overseer also warned of global transportation disruptions.

NERC also recommended utilities be on the lookout for cyberattacks taking advantage of the panic and using "coronavirus-themed opportunistic social engineering attacks" to hack into power companies' networks. Social engineering attacks are when hackers use social interactions to manipulate targets into giving up sensitive information.

"Spearphishing, watering hole, and other disinformation tactics are commonly used to exploit public interest in significant events," the alert said.

Electric utility representatives said they're working on or have already completed some of the steps outlined in NERC's alert, though nuclear plant workers have cited a lack of precautions in some cases.

"At this point, many of our members are activating and/or reviewing their business continuity and preparedness plans to ensure that operations and infrastructure are properly supported," said Tobias Sellier, director of media relations for the American Public Power Association, which represents around 1,400 electric utilities.

The power providers are also collaborating with other utilities such as "water, wastewater and gas," Sellier said.

Stephen Bell, senior director of media and public relations at the National Rural Electric Cooperative Association, said his group's members "have already taken a number of steps recommended by NERC" while continuing to maintain operations.

"Co-ops continue working with local, state and federal stakeholders to remain vigilant and prepared. These preparations include more frequent communications to key stakeholders, updating business continuity plans and monitoring new information from public health officials," said Bell.

Last week the Electricity Subsector Coordinating Council (ESCC), a panel of government and industry officials charged with responding to power-sector emergencies, scheduled a conference call discussing how to protect the grid from disruption if the virus infects system operators. Ohio-based utility American Electric Power Co. said it is limiting public visits, has created a high-level response team and is working to ensure operations can continue, while reinforcing downed power line safety, if the virus keeps spreading (Energywire, March 6).

Scott Aaronson, vice president for security and preparedness of the Edison Electric Institute, which represents major investor-owned utilities, said that the electric sector practices "contingency planning" to deal with unusual situations such as the coronavirus. That means that while the type of emergency may be new, dealing with an emergency situation is not, he said. Aaronson added that many of NERC's recommendations are based on what companies are already doing.

"We have heightened awareness given the circumstances, and we have messaging to employees all the way up and down the chain — from CEOs to frontline workers — that: given this time of heightened awareness and potential vulnerability, we have to practice hygiene both of the personal and cyber variety," said Aaronson.

Aaronson said that the ESCC had another call this week with the departments of Energy and Homeland Security and the Centers for Disease Control and Prevention to stay on top of the issue.

Hacking concerns
In a cybersecurity event yesterday, Lisa Monaco, co-chair of the Aspen Cybersecurity Group and former homeland security adviser during the Obama administration, warned that the coronavirus should be considered a national security threat.

"Frankly, [pandemic] is the thing that kept me up at night amongst many, many things that kept me up at night for four years in the White House," Monaco said.

Monaco went on to say the virus will strain organizations' IT infrastructure as more employees work remotely and households face higher electricity bills, and lead to "potentially more vulnerabilities for bad actors when it comes to cybersecurity."

On Friday, the DHS's Cybersecurity and Infrastructure Security Agency released advice on steps that can be taken to lessen the virus's impact on supply chains and cybersecurity, as well as tips for defending against scams exploiting coronavirus fears.

Cybersecurity firms also have been reporting a dramatic increase in spear-phishing attacks, with hackers reportedly using the coronavirus topic as a lure to trick victims into clicking a malicious link. Whether it's hackers aiming at industries susceptible to shipping disruptions, attacking countries like Italy hit particularly hard by the virus or even masquerading as the World Health Organization, cybercriminals are taking full advantage of the crisis, experts say.

Greg Young, vice president of cybersecurity at Trend Micro, said businesses should continue to expect an increase in targeted phishing attacks.

"With a large majority of businesses switching to a work-from-home model and less emphasis on in-person meetings, we also anticipate that malicious actors will start to impersonate digital tools such as 'free' remote conferencing services and other cloud computing software," said Young.

Working from home can be especially risky, as often home networks are less secure than corporate offices, Young said — meaning a hacker aiming to get into an enterprise network could find an "easier attack path" from a home office.

The Department of Energy is asking employees to make sure they can work remotely when needed, even as some agencies set limits with EPA telework policy, including updating security questions and asking those with government-furnished laptops to be sure they have a VPN, or virtual private network, account. In a post added this week to the agency's website, Chief Information Officer Rocky Campione said the department over the next two weeks will be initiating steps to ensure there is adequate network capacity to carry out DOE's work.

"Ensuring the continued operations of the department's many varied missions requires diligence," Campione said.

Related News

• Electricity Forum News

• Workforce Safety News

ERCOT Texas Power Grid Crisis disrupts millions amid a winter storm, with rolling blackouts, power outages, and energy demand; Elon Musk criticizes ERCOT as Tesla owners use Camp Mode while wind turbines face icing

Key Points

A Texas blackout during a winter storm, exposing ERCOT failures, rolling blackouts, and urgent grid resilience measures.

✅ Millions without power amid record cold and energy demand

✅ Elon Musk criticizes ERCOT over grid reliability failures

✅ Tesla Camp Mode aids warmth during extended outages

Tesla CEO Elon Musk on Wednesday slammed the Texas agency responsible for a statewide blackout amid a U.S. grid with frequent outages that has left millions of people to fend for themselves in a freezing cold winter storm.

Musk tweeted that Texas’ power grid manager, the Electricity Reliability Council of Texas (ERCOT), is not earning the “R” in the acronym, highlighting broader grid vulnerabilities that critics have noted.

Musk moved to Texas from California in December and is building a new Tesla factory in Austin. His critique of the state’s electrical grid operator came after multiple Tesla owners in the state said they had slept in their vehicles to keep warm amid the lingering power outage.

In 2019, Tesla released a vehicle with a “Camp Mode,” which enables owners to use the vehicle’s features – like lights and climate control – without significantly depleting the battery.

“We had the power go out for 6 hours last night. Our house does not have gas, and we ran out of firewood... what are we going to do,” one Reddit user wrote on “r/TeslaMotors.”

“So my wife my dog and my newborn daughter slept in the garage in our Model3 all nice and cozy. If I didn't have this car, it would have been a very rough night.”

More than two dozen people have died in the extreme weather this week, some while struggling to find warmth inside their homes. In the Houston area, one family succumbed to carbon monoxide from car exhaust in their garage. Another perished as they used a fireplace to keep warm.

Utilities from Minnesota to Texas and Mississippi have implemented rolling blackouts to ease the burden on power grids straining to meet extreme demand for heat and electricity, as longer, more frequent outages hit systems nationwide.

More than 3 million customers remained without power in Texas, Louisiana and Mississippi, more than 200,000 more in four Appalachian states, and nearly that many in the Pacific Northwest, according to poweroutage.us, which tracks utility outage reports, and advocates warn that millions could face summer shut-offs without protections.

ERCOT said early Wednesday that electricity had been restored to 600,000 homes and businesses by Tuesday night, though nearly 3 million homes and businesses remained without power, as California turns to batteries to help balance demand. Officials did not know when power would be restored.

ERCOT President Bill Magness said he hoped many customers would see at least partial service restored soon but could not say definitively when that would be.

Magness has defended ERCOT’s decision, saying it prevented an “even more catastrophic than the terrible events we've seen this week."

Utility crews raced Wednesday to restore power to nearly 3.4 million customers around the U.S. who were still without electricity in the aftermath of a deadly winter storm, even as officials urge residents to prepare for summer blackouts that could tax systems further, and another blast of ice and snow threatened to sow more chaos.

The latest storm front was expected to bring more hardship to states that are unaccustomed to such frigid weather — parts of Texas, Arkansas and the Lower Mississippi Valley — before moving into the Northeast on Thursday.

"There's really no letup to some of the misery people are feeling across that area," said Bob Oravec, lead forecaster with the National Weather Service, referring to Texas.

Sweden, known for its brutally cold climate, has offered some advice to Texans unaccustomed to such freezing temperatures, as Canadian grids are increasingly exposed to harsh weather that strains reliability. Stefan Skarp of the Swedish power company told Bloomberg on Tuesday: “The problem with sub-zero temperatures and humid air is that ice will form on the wind turbines.”

“When ice freezes on to the wings, the aerodynamic changes for the worse so that wings catch less and less wind until they don't catch any wind at all,” he said.

Related News

• Electricity Forum News

• Energy Policy News

Enegix Base One Green Hydrogen Plant will produce renewable hydrogen via electrolysis in Ceara, Brazil, leveraging 3.4 GW baseload renewables, offshore wind, and hydro to scale clean energy, storage, and export logistics.

Key Points

A $5.4bn Ceara, Brazil project to produce 600m kg of green hydrogen annually using 3.4 GW of baseload renewables.

✅ 3.4 GW baseload from hydro and offshore wind pipelines

✅ Targets 600m kg green hydrogen per year via electrolysis

✅ Focus on storage, transport, and export supply chains

In March, Enegix Energy announced some of the most ambitious hydrogen plans the world has ever seen. The company signed a memorandum of understanding (MOU) with the government of the Brazilian state of Ceará to build the world’s largest green hydrogen plant in the state on the country’s north-eastern coast, and the figures are staggering.

The Base One facility will produce more than 600 million kilograms of green hydrogen annually from 3.4GW of baseload renewable energy, and receive $5.4bn in investment to get the project off the ground and producing within four years.

Green hydrogen, hydrogen produced by electrolysis that is powered by renewables, has significant potential as a clean energy source. Already seeing increased usage in the transport sector, the power source boasts the energy efficiency and the environmental viability to be a cornerstone of the world’s energy mix.

Yet practical challenges have often derailed large-scale green hydrogen projects, from the inherent obstacle of requiring separate renewable power facilities to the logistical and technological challenges of storing and transporting hydrogen. Could vast investment, clever planning, and supportive governments and programs like the DOE’s hydrogen hubs initiative help Enegix to deliver on green hydrogen’s oft-touted potential?

Brazilian billions
The Base One project is exceptional not only for its huge scale, but the timing of its construction, with demand for hydrogen set to increase dramatically over the next few decades. Figures from Wood Mackenzie suggest that hydrogen could account for 1.4 billion tonnes of energy demand by 2050, one-tenth of the world’s supply, with green hydrogen set to be the majority of this figure.

Yet considering that, prior to the announcement of the Enegix project, global green hydrogen capacity was just 94MW, advances in offshore green hydrogen and the development of a project of this size and scope could scale up the role of green hydrogen by orders of magnitude.

“We really need to [advance clean energy] without any emissions on a completely clean, carbon neutral and net-zero framework, and so we needed access to a large amount of green energy projects,” explains Wesley Cooke, founder and CEO of Enegix, a goal aligned with analyses that zero-emissions electricity by 2035 is possible, discussing the motivation behind the vast project.

With these ambitious goals in mind, the company needed to find a region with a particular combination of political will and environmental traits to enable such a project to take off.

“When we looked at all of these key things: pipeline for renewables, access to water, cost of renewables, and appetite for renewables, Brazil really stood out to us,” Cooke continues. “The state of Ceará, that we’ve got an MOU with the government in at the moment, ticks all of these boxes.”

Ceará’s own clean energy plans align with Enegix’s, at least in terms of their ambition and desire for short-term development. Last October, the state announced that it plans to add 5GW of new offshore wind capacity in the next five years. With BI Energia alone providing $2.5bn in investment for its 1.2GW Camocim wind facility, there is significant financial muscle behind these lofty ambitions.

“One thing I should add is that Brazil is very blessed when it comes to baseload renewables,” says Cooke. “They have an incredibly high percentage of their country-wide energy that comes from renewable sources and a lot of this is in part due to the vast hydro schemes that they have for hydro dams. Not a lot of countries have that, and specifically when you’re trying to produce hydrogen, having access to vast amounts of renewables [is vital].”

Changing perceptions and tackling challenges
This combination of vast investment and integration with the existing renewable power infrastructure of Ceará could have cultural impacts too. The combination of state support for and private investment in clean energy offsets many of the narratives emerging from Brazil concerning its energy policies and environmental protections, even as debates over clean energy's trade-offs persist in Brazil and beyond, from the infamous Brumadinho disaster to widespread allegations of illegal deforestation and gold mining.

“I can’t speak for the whole of Brazil, but if we look at Ceará specifically, and even from what we’ve seen from a federal government standpoint, they have been talking about a hydrogen roadmap for Brazil for quite some time now,” says Cooke, highlighting the state’s long-standing support for green hydrogen. “I think we came in at the perfect time with a very solid plan for what we wanted to do, [and] we’ve had nothing but great cooperation, and even further than just cooperation, excitement around the MOU.”

This narrative shift could help overcome one of the key challenges facing many hydrogen projects, the idea that its practical difficulties render it fundamentally unsuitable for baseload power generation. By establishing a large-scale green hydrogen facility in a country that has recently struggled to present itself as one that is invested in renewables, the Base One facility could be the ultimate proof that such clean hydrogen projects are viable.

Nevertheless, practical challenges remain, as is the case with any energy project of this scale. Cooke mentions a number of solutions to two of the obstacles facing hydrogen production around the world: renewable energy storage and transportation of the material.

“We were looking at compressed hydrogen via specialised tankers [and] we were looking at liquefied hydrogen, [as] you have to get liquefied hydrogen very cool to around -253°, and you can use 30% to 40% of your total energy that you started with just to get it down to that temperature,” Cooke explains.

“The other aspect is that if you’re transporting this internationally, you really have to think about the supply chain. If you land in a country like Indonesia, that’s wonderful, but how do you get it from Indonesia to the customers that need it? What is the supply chain? What does that look like? Does it exist today?”

The future of green hydrogen
These practical challenges present something of a chicken and egg problem for the future of green hydrogen: considerable up-front investment is required for functions such as storage and transport, but the difficulties of these functions can scare off investors and make such investments uncommon.

Yet with the world’s environmental situation increasingly dire, more dramatic, and indeed risky, moves are needed to alter its energy mix, and Enegix is one company taking responsibility and accepting these risks.

“We need to have the renewables to match the dirty fuel types,” Cooke says. “This [investment] will really come from the decisions that are being made right now by large-scale companies, multi-billion-euro-per-year revenue companies, committing to building out large scale factories in Europe and Asia, to support PEM [hydrolysis].”

This idea of large-scale green hydrogen is also highly ambitious, considering the current state of the energy source. The International Renewable Energy Agency reports that around 95% of hydrogen comes from fossil fuels, so hydrogen has a long ways to go to clean up its own carbon footprint before going on to displace fossil fuel-driven industries.

Yet this displacement is exactly what Enegix is targeting. Cooke notes that the ultimate goal of Enegix is not simply to increase hydrogen production for use in a single industry, such as clean vehicles. Instead, the idea is to develop green hydrogen infrastructure to the point where it can replace coal and oil as a source of baseload power, leapfrogging other renewables to form the bedrock of the world’s future energy mix.

“The problem with [renewable] baseload is that they’re intermittent; the wind’s not always blowing and the sun’s not always shining and batteries are still very expensive, although that is changing. When you put those projects together and look at the levelised cost of energy, this creates a chasm, really, for baseload.

“And for us, this is really where we believe that hydrogen needs to be thought of in more detail and this is what we’re really evangelising about at the moment.”

A more hydrogen-reliant energy mix could also bring social benefits, with Cooke suggesting that the same traits that make hydrogen unwieldy in countries with established energy infrastructures could make hydrogen more practically viable in other parts of the world.

“When you look at emerging markets and developing markets at the moment, the power infrastructure in some cases can be quite messy,” Cooke says. “You’ve got the potential for either paying for the power or extending your transmission grid, but rarely being able to do both of those.

“I think being able to do that last mile piece, utilising liquid organic hydrogen carrier as an energy vector that’s very cost-effective, very scalable, non-toxic, and non-flammable; [you can] get that power where you need it.

“We believe hydrogen has the potential to be very cost-effective at scale, supporting a vision of cheap, abundant electricity over time, but also very modular and usable in many different use cases.”

Related News

• Electricity Forum News

• Renewable Energy News

California Rooftop Solar Rate Reforms propose shifting net metering to fixed access fees, peak-demand charges, and time-of-use pricing, aligning grid costs, distributed generation incentives, and retail rates for efficient, least-cost electricity and fair cost recovery.

Key Points

Policies replacing net metering with fixed fees, demand charges, and time-of-use rates to align costs and incentives.

✅ Large fixed access charge funds grid infrastructure

✅ Peak-demand pricing reflects capacity costs at system peak

✅ Time-varying rates align marginal costs and emissions

The California Public Service Commission has proposed revamping electricity rates for residential customers who produce electricity through their rooftop solar panels. In a recent New York Times op‐​ed, former Governor Arnold Schwarzenegger argued the changes pose an existential threat to residential rooftop solar. Interest groups favoring rooftop solar portray the current pricing system, often called net metering, in populist terms: “Net metering is the one opportunity for the little guy to get relief, and they want to put the kibosh on it.” And conventional news coverage suggests that because rooftop solar is an obvious good development and nefarious interests, incumbent utilities and their unionized employees, support the reform, well‐​meaning people should oppose it. A more thoughtful analysis would inquire about the characteristics and prices of a system that supplies electricity at least cost.

Currently, under net metering customers are billed for their net electricity use plus a minimum fixed charge each month. When their consumption exceeds their home production, they are billed for their net use from the electricity distribution system (the grid) at retail rates. When their production exceeds their consumption and the excess is supplied to the grid, residential consumers also are reimbursed at retail rates. During a billing period, if a consumer’s production equaled their consumption their electric bill would only be the monthly fixed charge.

Net metering would be fine if all the fixed costs of the electric distribution and transmission systems were included in the fixed monthly charge, but they are not. Between 66 and 77 percent of the expenses of California private utilities do not change when a customer increases or decreases consumption, but those expenses are recovered largely through charges per kWh of use rather than a large monthly fixed charge. Said differently, for every kWh that a PG&E solar household exported into the grid in 2019, it saved more than 26 cents, on average, while the utility’s costs only declined by about 8 cents or less including an estimate of the pollution costs of the system’s fossil fuel generators. The 18‐​cent difference pays for costs that don’t change with variation in a household’s consumptions, like much of the transmission and distribution system, energy efficiency programs, subsidies for low‐​income customers, and other fixed costs. Rooftop solar is so popular in California because its installation under a net metering system avoids the 18 cents, creating a solar cost shift onto non-solar customers. Rooftop solar is not the answer to all our environmental needs. It is simply a form of arbitrage around paying for the grid’s fixed costs.

What should electricity tariffs look like? This article in Regulation argues that efficient charges for electricity would consist of three components: a large fixed charge for the distribution and transmission lines, meter reading, vegetation trimming, etc.; a peak‐​demand charge related to your demand when the system’s peak demand occurs to pay for fixed capacity costs associated with peak use; and a charge for electricity use that reflects the time‐ and location‐​varying cost of additional electricity supply.

Actual utility tariffs do not reflect this ideal because of political concerns about the effects of large fixed monthly charges on low‐​income customers and the optics of explaining to customers that they must pay 50 or 60 dollars a month for access even if their use is zero. Instead, the current pricing system “taxes” electricity use to pay for fixed costs. And solar net metering is simply a way to avoid the tax. The proposed California rate reforms would explicitly impose a fixed monthly charge on rooftop solar systems that are also connected to the grid, a change that could bring major changes to your electric bill statewide, and would thus end the fixed‐​cost avoidance. Any distributional concerns that arise because of the effect of much larger fixed charges on lower‐​income customers could be managed through explicit tax deductions that are proportional to income.

The current rooftop solar subsidies in California also should end because they have perverse incentive effects on fossil fuel generators, even as the state exports its energy policies to neighbors. Solar output has increased so much in California that when it ends with every sunset, natural gas generated electricity has to increase very rapidly. But the natural gas generators whose output can be increased rapidly have more pollution and higher marginal costs than those natural gas plants (so called combined cycle plants) whose output is steadier. The rapid increase in California solar capacity has had the perverse effect of changing the composition of natural gas generators toward more costly and polluting units.

The reforms would not end the role of solar power. They would just shift production from high‐​cost rooftop to lower‐​cost centralized solar production, a transition cited in analyses of why electricity prices are soaring in California, whose average costs are comparable with electricity production in natural gas generators. And they would end the excessive subsidies to solar that have negatively altered the composition of natural gas generators.

Getting prices right does not generate citizen interest as much as the misguided notion that rooftop solar will save the world, and recent efforts to overturn income-based utility charges show how politicized the debate remains. But getting prices right would allow the decentralized choices of consumers and investors to achieve their goals at least cost.

Related News

• Electricity Forum News

• Energy Policy News

OESP Eligibility 2024 updates Ontario electricity affordability: TOU, Tiered, Ultra-Low-Overnight price plans, online bill calculator, higher income thresholds, monthly credits for low-income households, and a winter disconnection ban for residential customers.

Key Points

Raises income thresholds and credits to help low-income Ontarians cut electricity costs and choose suitable price plans.

✅ TOU, Tiered, and ULO price plans with online bill calculator

✅ Income eligibility thresholds raised up to 35% on March 1, 2024

✅ Winter disconnection ban for residences: Nov 15, 2023 to Apr 30, 2024

Residential, small business and farm customers can choose their price plan, either Time-Of-Use (TOU), Tiered or the ultra-low overnight rates price plan available to many customers. The OEB has an online bill calculator to help customers who are considering a switch in price plans and monitoring changes for electricity consumers this year. 

The Government of Ontario announced on Friday, October 19, 2023, that it is raising the income eligibility thresholds that enable Ontarians to qualify for the Ontario Electricity Support Program (OESP) by up to 35 percent. OESP is part of Ontario’s energy affordability framework and other support for electric bills meant to reduce the cost of electricity for low-income households by applying a monthly credit directly on to electricity bills.. The higher income eligibility thresholds will begin on March 1, 2024.

The amount of OESP bill credit is determined by the number of people living in a home and the household’s combined income, and can help offset typical bill increases many customers experience. The current income thresholds cap income eligibility at $28,000 for one-person households and $52,000 for five-person households, and temporary measures like the off-peak price freeze have also influenced bills in recent periods.

The new income eligibility thresholds, which will be in effect beginning March 1, 2024, will allow many more families to access the program as rates are about to change across Ontario.

In addition, under the OEB’s winter disconnection ban, which follows the Nov. 1 rate increase, electricity distributors cannot disconnect residential customers for non-payment from November 15, 2023, to April 30, 2024.

Related News

• Electricity Forum News

• Energy Policy News

US Power Grid Cyberattacks target utilities and nuclear plants, probing SCADA, ICS, and business networks at sites like Wolf Creek; suspected Russian actors, malware, and spear-phishing trigger DHS and FBI alerts on critical infrastructure resilience.

Key Points

Intrusions on energy networks probing ICS and SCADA, seeking persistence and elevating risks to critical infrastructure.

✅ Wolf Creek nuclear plant targeted; no operational systems breached

✅ Attackers leveraged stolen credentials, malware, and spear-phishing

✅ DHS and FBI issued alerts; utilities enhance cyber resilience

Hackers working for a foreign government recently breached at least a dozen US power plants, including the Wolf Creek nuclear facility in Kansas, according to current and former US officials, sparking concerns the attackers were searching for vulnerabilities in the electrical grid.

The rivals could be positioning themselves to eventually disrupt the nation’s power supply, warned the officials, who noted that a general alert, prompting a renewed focus on protecting the U.S. power grid, was distributed to utilities a week ago. Adding to those concerns, hackers recently infiltrated an unidentified company that makes control systems for equipment used in the power industry, an attack that officials believe may be related.

The chief suspect is Russia, according to three people familiar with the continuing effort to eject the hackers from the computer networks. One of those networks belongs to an ageing nuclear generating facility known as Wolf Creek -- owned by Westar Energy Inc, Great Plains Energy Inc, and Kansas Electric Power Cooperative Inc -- on a lake shore near Burlington, Kansas.

The possibility of a Russia connection is particularly worrying, former and current official s say, because Russian hackers have previously taken down parts of the electrical grid in Ukraine and appear to be testing increasingly advanced tools, including cyber weapons to disrupt power grids, to disrupt power supplies.

The hacks come as international tensions have flared over US intelligence agencies’ conclusion that Russia tried to influence the 2016 presidential election, and amid U.S. government condemnation of Russian power-grid hacking in recent advisories. The US, which has several continuing investigations into Russia’s activities, is known to possess digital weapons capable of disrupting the electricity grids of rival nations.

“We don’t pay attention to such anonymous fakes,” Kremlin spokesman Dmitry Peskov said, in response to a request to comment on alleged Russian involvement.

It was unclear whether President Donald Trump was planning to address the cyber attacks at his meeting on Friday with Russian President Vladimir Putin. In an earlier speech in Warsaw, Trump called out Russia’s “destabilising activities” and urged the country to join “the community of responsible nations.”

The Department of Homeland Security and Federal Bureau of Investigation said they are aware of a potential intrusion in the energy sector. The alert issued to utilities cited activities by hackers since May.

“There is no indication of a threat to public safety, as any potential impact appears to be limited to administrative and business networks,” the government agencies said in a joint statement.

The Department of Energy also said the impact appears limited to administrative and business networks and said it was working with utilities and grid operators to enhance security and resilience.

“Regardless of whether malicious actors attempt to exploit business networks or operational systems, we take any reports of malicious cyber activity potentially targeting our nation’s energy infrastructure seriously and respond accordingly,” the department said in an emailed statement.

Representatives of the National Security Council, the Director of National Intelligence and the Nuclear Regulatory Commission declined to comment. While Bloomberg News was waiting for responses from the government, the New York Times reported that hacks were targeting nuclear power stations.

The North American Electric Reliability Corp, a nonprofit that works to ensure the reliability of the continent’s power system, said it was aware of the incident and was exchanging information with the industry through a secure portal.

“At this time, there has been no bulk power system impact in North America,” the corporation said in an emailed statement.

In addition, the operational controls at Wolf Creek were not pierced, according to government officials, even as attackers accessed utility control rooms elsewhere in the U.S., according to separate reports. “There was absolutely no operational impact to Wolf Creek,” Jenny Hageman, a spokeswoman for the nuclear plant, said in a statement to Bloomberg News.

“The reason that is true is because the operational computer systems are completely separate from the corporate network.”

Determining who is behind an attack can be tricky. Government officials look at the sophistication of the tools, among other key markers, when gauging whether a foreign government is sponsoring cyber activities.

Several private security firms, including Symantec researchers, are studying data on the attacks, but none has linked the work to a particular hacking team or country.

“We don’t tie this to any known group at this point,” said Sean McBride, a lead analyst for FireEye Inc, a global cyber security firm. “It’s not to say it’s not related, but we don’t have the evidence at this point.”

US intelligence officials have long been concerned about the security of the country’s electrical grid. The recent attack, striking almost simultaneously at multiple locations, is testing the government’s ability to coordinate an effective response among several private utilities, state and local officials, and industry regulators.

Specialised teams from Homeland Security and the FBI have been scrambled to help extricate the hackers from the power stations, in some cases without informing local and state officials. Meanwhile, the US National Security Agency is working to confirm the identity of the hackers, who are said to be using computer servers in Germany, Italy, Malaysia and Turkey to cover their tracks.

Many of the power plants are conventional, but the targeting of a nuclear facility adds to the pressure. While the core of a nuclear generator is heavily protected, a sudden shutdown of the turbine can trigger safety systems. These safety devices are designed to disperse excess heat while the nuclear reaction is halted, but the safety systems themselves may be vulnerable to attack.

Homeland Security and the FBI sent out a general warning about the cyber attack to utilities and related parties on June 28, though it contained few details or the number of plants affected. The government said it was most concerned about the “persistence” of the attacks on choke points of the US power supply. That language suggests hackers are trying to establish backdoors on the plants’ systems for later use, according to a former senior DHS official who asked not to be identified.

Those backdoors can be used to insert software specifically designed to penetrate a facility’s operational controls and disrupt critical systems, according to Galina Antova, co-founder of Claroty, a New York firm that specialises in securing industrial control systems.

“We’re moving to a point where a major attack like this is very, very possible,” Antova said. “Once you’re into the control systems -- and you can get into the control systems by hacking into the plant’s regular computer network -- then the basic security mechanisms you’d expect are simply not there.”

The situation is a little different at nuclear facilities. Backup power supplies and other safeguards at nuclear sites are meant to ensure that “you can’t really cause a nuclear plant to melt down just by taking out the secondary systems that are connected to the grid,” Edwin Lyman, a nuclear expert with the Union of Concerned Scientists, said in a phone interview.

The operating systems at nuclear plants also tend to be legacy controls built decades ago and don’t have digital control systems that can be exploited by hackers. Wolf Creek, for example, began operations in 1985. “They’re relatively impervious to that kind of attack,” Lyman said.

The alert sent out last week inadvertently identified Wolf Creek as one of the victims of the attack. An analysis of one of the tools used by the hackers had the stolen credentials of a plant employee, a senior engineer. A US official acknowledged the error was not caught until after the alert was distributed.

According to a security researcher who has seen the report, the malware that activated the engineer’s username and password was designed to be used once the hackers were already inside the plant’s computer systems.

The tool tries to connect to non-public computers, and may have been intended to identify systems related to Wolf Creek’s generation plant, a part of the facility typically more modern than the nuclear reactor control room, according to a security expert who asked to note be identified because the alert is not public.

Even if there is no indication that the hackers gained access to those control systems, the design of the malware suggests they may have at least been looking for ways to do so, the expert said.

Stan Luke, the mayor of Burlington, the largest community near Wolf Creek, which is surrounded by corn fields and cattle pastures, said he learned about a cyber threat at the plant only recently, and then only through golfing buddies.

With a population of just 2,700, Burlington boasts a community pool with three water slides and a high school football stadium that would be the envy of any junior college. Luke said those amenities lead back to the tax dollars poured into the community by Wolf Creek, Coffey County’s largest employer with some 1,000 workers, 600 of whom live in the county.

E&E News first reported on digital attacks targeting US nuclear plants, adding it was code-named Nuclear 17. A senior US official told Bloomberg that there was a bigger breach of conventional plants, which could affect multiple regions.

Industry experts and US officials say the attack is being taken seriously, in part because of recent events in Ukraine. Antova said that the Ukrainian power grid has been disrupted at least twice, first in 2015, and then in a more automated attack last year, suggesting the hackers are testing methods.

Scott Aaronson, executive director for security and business continuity at the Edison Electric Institute, an industry trade group, said utilities, grid operators and federal officials were already dissecting the attack on Ukraine’s electric sector to apply lessons in North America before the US government issued the latest warning to “energy and critical manufacturing sectors”. The current threat is unrelated to recently publicised ransomware incidents or the CrashOverride malware, Mr Aaronson said in an emailed statement.

Neither attack in Ukraine caused long-term damage. But with each escalation, the hackers may be gauging the world’s willingness to push back.

“If you think about a typical war, some of the acts that have been taken against critical infrastructure in Ukraine and even in the US, those would be considered crossing red lines,” Antova said.

Related News

• Electricity Forum News

• Grid Technologies News