German Energy Demand Hits Historic Low Amid Economic Stagnation

U.S. Power Grid Cybersecurity combats DHS-FBI flagged threats to energy infrastructure, with PJM Interconnection using ICS/SCADA segmentation, phishing defenses, incident response, and resilience exercises against Russia-linked attacks and pipeline intrusions.

Key Points

Strategies, controls, and training that protect U.S. electric infrastructure from cyber threats and disruptions.

✅ ICS/SCADA network segmentation and zero-trust architecture

✅ Employee phishing drills and incident response playbooks

✅ DOE-led grid exercises and threat intelligence sharing

The joint alert from the FBI and Department of Homeland Security last month warning that Russia was hacking into critical U.S. energy infrastructure, as outlined in six essential reads on Russian hacks from recent coverage, came as no surprise to the nation’s largest grid operator, PJM Interconnection.

“You will never stop people from trying to get into your systems. That isn’t even something we try to do.” said PJM Chief Information Officer, Tom O’Brien. “People will always try to get into your systems. The question is, what controls do you have to not allow them to penetrate? And how do you respond in the event they actually do get into your system?”

PJM is the regional transmission organization for 65 million people, covering 13 states, including Pennsylvania, and Washington D.C.

On a rainy day in early April, about 10 people were working inside PJM’s main control center, outside Philadelphia, closely monitoring floor-to-ceiling digital displays showing real-time information from the electric power sector throughout PJM’s territory in the mid-Atlantic and parts of the midwest, amid reports that hackers accessed control rooms at U.S. utilities.

#google#

Donnie Bielak, a reliability engineering manager, was overseeing things from his office, perched one floor up.

“This is a very large, orchestrated effort that goes unnoticed most of the time,” Bielak said. “That’s a good thing.”

But the industry certainly did take notice in late 2015 and early 2016, when hackers successfully disrupted power to the Ukrainian grid. The outages lasted a few hours and affected about 225,000 customers. It was the first publicly-known case of a cyber attack causing major disruptions to a power grid. It was widely blamed on Russia.

One of the many lessons of the Ukraine attacks was a reminder to people who work on critical infrastructure to keep an eye out for odd communications.

“A very large percentage of entry points to attacks are coming through emails,” O’Brien said. “That’s why PJM, as well as many others, have aggressive phishing campaigns. We’re training our employees.”

O’Brien doesn’t want to get into specifics about how PJM deals with cyber threats. But one common way to limit exposure is by having separate systems: For example, industrial controls in a power plant are not connected to corporate business networks, a separation underscored after breaches at U.S. power plants prompted reviews across the sector.

Since 2011, North American grid operators and government agencies have also done large, security exercises every two years. Thousands of people practice how they’d respond to a coordinated physical or cyber event, including rising substation attacks that highlight resilience gaps.

So far, nothing like that has happened in the U.S. It’s possible, but not likely, according to Robert M. Lee, a former military intelligence analyst, who runs the industrial cybersecurity firm Dragos.

“The more complex the system, the harder it is to have a scalable attack,” said Lee, who co-authored a report analyzing the Ukraine attacks. “If you wanted to take out a power generation station– that isn’t the most complex thing. Let’s say you cause an hour of outage. But now you want to cause two months of outages? That’s an exponential increase in effort required.”

For example, he said, it would very difficult for hackers to knock out power to the entire east coast for a long time. But briefly disrupting a major city is easier. That’s the sort of thing that keeps him up at night.

“I worry about an adversary getting into, maybe, Washington D.C.’s portion of the grid, taking down power for 30 minutes,” he said.

The Department of Energy is creating a new office focused on cybersecurity and emergency response, following the U.S. government’s condemnation of power grid hacking by Russia.

Deterrence may be one reason why there has not yet been a major attack on the U.S. grid, said John MacWilliams, a former senior DOE official who’s now a fellow at Columbia University’s Center on Global Energy Policy.

“That’s obviously an act of war,” he said. “We have the capability of responding either through cyber mechanisms or kinetic military.”

In the meantime, small-scale incidents keep happening.

This spring, another cyber attack targeted natural gas pipelines. Four companies shut down their computer systems, just in case, but they say no service was disrupted.

Related News

• Electricity Forum News

• Grid Technologies News

Crouching Yeti APT targets energy infrastructure with watering-hole attacks, compromising servers to steal credentials and stage intrusions; Kaspersky Lab links the Energetic Bear group to ICS threats across Russia, US, Europe, and Turkey.

Key Points

Crouching Yeti APT, aka Energetic Bear, is a threat group that targets energy firms using watering-hole attacks.

✅ Targets energy infrastructure via watering-hole compromises

✅ Uses open-source tools and backdoored sshd for persistence

✅ Scans global servers to stage intrusions and steal credentials

A hacker collective known for attacking industrial companies around the world have had some of their infrastructure identified by Russian security specialists.

Kaspersky Lab said that it has discovered a number of servers compromised by the group, belonging to different organisations based in Russia, the US, and Turkey, as well as European countries.

The Russian-speaking hackers, known as Crouching Yeti or Energetic Bear, mostly focus on energy facilities, as seen in reports of infiltration of the U.S. power grid targeting critical infrastructure, for the main purpose of stealing valuable data from victim systems.

Hacked servers

Crouching Yeti is described as an advanced persistent threat (APT) group that Kaspersky Lab has been tracking since 2010.

#google#

Kaspersky Lab said that the servers it has compromised are not just limited to industrial companies. The servers were hit in 2016 and 2017 with different intentions. Some were compromised to gain access to other resources or to be used as intermediaries to conduct attacks on other resources.

Others, including those hosting Russian websites, were used as watering holes.

It is a common tactic for Crouching Yeti to utilise watering hole attacks where the attackers inject websites with a link redirecting visitors to a malicious server.

“In the process of analysing infected servers, researchers identified numerous websites and servers used by organisations in Russia, US, Europe, Asia and Latin America that the attackers had scanned with various tools, possibly to find a server that could be used to establish a foothold for hosting the attackers’ tools and to subsequently develop an attack,” said the security specialists in a blog posting.

“The range of websites and servers that captured the attention of the intruders is extensive,” the firm said. “Kaspersky Lab researchers found that the attackers had scanned numerous websites of different types, including online stores and services, public organisations, NGOs, manufacturing, etc.

Kaspersky Lab said that the hackers used publicly available malicious tools, designed for analysing servers, and for seeking out and collecting information. The researchers also found a modified sshd file with a preinstalled backdoor. This was used to replace the original file and could be authorised with a ‘master password’.

“Crouching Yeti is a notorious Russian-speaking group that has been active for many years and is still successfully targeting industrial organisations through watering hole attacks, among other techniques,” explained Vladimir Dashchenko, head of vulnerability research group at Kaspersky Lab ICS CERT.

Russian government?

“Our findings show that the group compromised servers not only for establishing watering holes, but also for further scanning, and they actively used open-sourced tools that made it much harder to identify them afterwards,” he said.

“The group’s activities, such as initial data collection, the theft of authentication data, and the scanning of resources, are used to launch further attacks,” said Dashchenko. “The diversity of infected servers and scanned resources suggests the group may operate in the interests of the third parties.”

This may well tie into a similar conclusion from a rival security vendor.

In 2014 CrowdStrike claimed that the ‘Energetic Bear’ group was also tracked in Symantec's Dragonfly research and had been hacking foreign companies on behalf of the Russian state.

The security vendor had said the group had been carrying out attacks on foreign companies since 2012, with reports of breaches at U.S. power plants that underscored the campaign, and there was evidence that these operations were sanctioned by the Russian government.

Last month the United States for the first time publicly accused Russia in a condemnation of Russian grid hacking of attacks against the American power grid.

Symantec meanwhile warned last year of a resurgence in cyber attacks on European and US energy companies, including reports of access to U.S. utility control rooms that could result in widespread power outages.

And last July the UK’s National Cyber Security Centre (NCSC) acknowledged it was investigating a broad wave of attacks on companies in the British energy and manufacturing sectors.

Related News

• Electricity Forum News

• Grid Technologies News

UK Electricity Price Surge driven by wholesale gas costs, low wind output, and higher gas-fired generation, as National Grid boosts base load power to meet demand, lifting weekend prices toward decade highs.

Key Points

A sharp rise in UK power prices tied to gas spikes, waning wind, and higher reliance on gas-fired generation.

✅ Wholesale gas prices squeeze power, doubling weekend baseload.

✅ Wind generation falls to 3GW, forcing more gas-fired plants.

✅ Tariff hikes signal bill pressure and supplier strain.

The UK’s electricity market has followed the lead of surging wholesale gas prices this week to reach weekend highs, with UK peak power prices not seen in a decade across the market.

The power market has avoided the severe volatility which ripped through the gas market this week because strong winds helped to supply ample electricity to meet demand, reflecting recent record wind generation across the UK.

But as freezing winds begin to wane this weekend National Grid will need to use more gas-fired power plants to fill the gap, meaning the cost of generating electricity will surge.

Jamie Stewart, an energy expert at ICIS, said the price for base load power this weekend has already soared to around £80 per megawatt hour, almost double what one would expect to see for a weekend in March.

National Grid will increase its use of expensive gas-fired power by an extra 7GW to make up for low wind power, which is forecast to drop by two-thirds in the days ahead.

Wind speeds helped to protect the electricity system from huge price hikes on the neighbouring gas market on Thursday, by generating as much as 13GW by some estimates.

However, by the end of Friday this output will fall by almost half to 7GW and slump to lows of 3GW by Saturday, Mr Stewart said.

The power price was already higher than usual at £53/MWh last weekend even before the full force of the storms, including Storm Malik wind generation, hit Britain. That was still well above the more typical "mid-40s” price for this time of year, Mr Stewart added.

The twin price spikes across the UK’s energy markets has raised fears of household bill hikes in the months ahead, even as an emergency energy plan is not going ahead.

Late on Thursday Big Six supplier E.on quietly pushed through a dual-fuel tariff increase of 2.6%, to drive the average bill up to £1,153 from 19 April.

Energy supply minnow Bulb also increased prices by £24 a year for its 300,000 customers, blaming rising wholesale costs.

The UK has suffered two gas price shocks this winter, which is the first since the owner of British Gas shuttered the country’s largest gas storage facility at Rough off the Yorkshire coast.

A string of gas supply outages this week cut supplies to the UK just as freezing conditions drove demand for gas-heating a third higher than normal for this time of year.

It was the first time in almost ten years that National Grid was forced to issue a short supply warning to the market that supplies would fall short of demand unless factories agree to use less.

The twelve-year market price highs followed a pre-Christmas spike when the UK’s most important North Sea pipeline shut down at the same time as a deadly explosion at Europe’s most important gas hub, based in the Austrian town of Baumgarten.

Related News

• Electricity Forum News

• Power Generation News

North Seattle Power Outage disrupts 13,000 in Ballard, Northgate, and Lake City as Seattle City Light crews repair equipment failures. Aging infrastructure, smart grid upgrades, microgrids, and emergency preparedness highlight resilience and reliability challenges.

Key Points

A major outage affecting 13,000 in North Seattle from equipment failures and aging grid, prompting repairs and planning.

✅ 13,000 customers in Ballard, Northgate, Lake City affected

✅ Cause: equipment failures and aging infrastructure

✅ Crews, smart grid upgrades, and preparedness improve resilience

On a recent Wednesday morning, a significant power outage struck a large area of North Seattle, affecting approximately 13,000 residents and businesses. This incident not only disrupted daily routines, as seen in a recent London outage, but also raised questions about infrastructure reliability and emergency preparedness in urban settings.

Overview of the Outage

The outage began around 9 a.m., with initial reports indicating that neighborhoods including Ballard, Northgate, and parts of Lake City were impacted. Utility company Seattle City Light quickly dispatched crews to identify the cause of the outage and restore power as soon as possible. By noon, the utility reported that repairs were underway, with crews working diligently to restore service to those affected.

Such outages can occur for various reasons, including severe weather, such as windstorm-related failures, equipment failure, or accidents involving utility poles. In this instance, the utility confirmed that a series of equipment failures contributed to the widespread disruption. The situation was exacerbated by the age of some infrastructure in the area, highlighting ongoing concerns about the need for modernization and upgrades.

Community Impact

The power outage caused significant disruptions for residents and local businesses. Many households faced challenges as their morning routines were interrupted—everything from preparing breakfast to working from home became more complicated without electricity. Schools in the affected areas also faced challenges, as some had to adjust their schedules and operations.

Local businesses, particularly those dependent on refrigeration and electronic payment systems, felt the immediate impact. Restaurants struggled to serve customers without power, while grocery stores dealt with potential food spoilage, leading to concerns about lost inventory and revenue. The outage underscored the vulnerability of businesses to infrastructure failures, as recent Toronto outages have shown, prompting discussions about contingency plans and backup systems.

Emergency Response

Seattle City Light’s swift response was crucial in minimizing the outage's impact. Utility crews worked through the day to restore power, and the company provided regular updates to the community, keeping residents informed about progress and estimated restoration times. This transparent communication was essential in alleviating some of the frustration among those affected, and contrasts with extended outages in Houston that heightened public concern.

Furthermore, the outage served as a reminder of the importance of emergency preparedness for both individuals and local governments, and of utility disaster planning that supports resilience. Many residents were left unprepared for an extended outage, prompting discussions about personal emergency kits, alternative power sources, and community resources available during such incidents. Local officials encouraged residents to stay informed about power outages and to have a plan in place for emergencies.

Broader Implications for Infrastructure

This incident highlights the broader challenges facing urban infrastructure. Many cities, including Seattle, are grappling with aging power grids that struggle to keep up with modern demands, and power failures can disrupt transit systems like the London Underground during peak hours. Experts suggest that regular assessments and updates to infrastructure are critical to ensuring reliability and resilience against both natural and human-made disruptions.

In response to increasing frequency and severity of power outages, including widespread windstorm outages in Quebec, there is a growing call for investment in modern technologies and infrastructure. Smart grid technology, for instance, can enhance monitoring and maintenance, allowing utilities to respond more effectively to outages. Additionally, renewable energy sources and microgrid systems could offer more resilience and reduce reliance on centralized power sources.

The recent power outage in North Seattle was a significant event that affected thousands of residents and businesses. While the immediate response by Seattle City Light was commendable, the incident raised important questions about infrastructure reliability and emergency preparedness. As cities continue to grow and evolve, the need for modernized power systems and improved contingency planning will be crucial to ensuring that communities can withstand future disruptions.

As residents reflect on this experience, it serves as a reminder of the interconnectedness of urban living and the critical importance of reliable infrastructure in maintaining daily life. With proactive measures, cities can work towards minimizing the impact of such outages and building a more resilient future for their communities.

Related News

• Electricity Forum News

• Utility Operations News

Georgia Electricity Imports October 2017 surged as hydropower output fell and thermal power plants underperformed; ESCO balanced demand via low-cost imports, mainly from Azerbaijan, amid rising tariffs, kWh consumption growth, and a widening generation-consumption gap.

Key Points

They mark a record import surge due to costly local generation, lower hydropower, ESCO balancing costs, and rising demand.

✅ Imports rose 832% YoY to 157 mln kWh, mainly from Azerbaijan

✅ TPP output fell despite capacity; only low-tariff plants ran

✅ Balancing price 13.8 tetri/kWh signaled costly domestic PPAs

In October 2017, Georgian power plants generated 828 mln. KWh of electricity, marginally up (+0.79%) compared to September. Following the traditional seasonal pattern and amid European concerns over dispatchable power shortages affecting markets, the share of electricity produced by renewable sources declined to 71% of total generation (87% in September), while thermal power generation’s share increased, accounting for 29% of total generation (compared to 13% in September). When we compare last October’s total generation with the total generation of October 2016, however, we observe an 8.7% decrease in total generation (in October 2016, total generation was 907 mln. kWh). The overall decline in generation with respect to the previous year is due to a simultaneous decline in both thermal power and hydro power generation. 

Consumption of electricity on the local market in the same period was 949 mln. kWh (+7% compared to October 2016, and +3% with respect to September 2017), and reflected global trends such as India's electricity growth in recent years. The gap between consumption and generation increased to 121 mln. kWh (15% of the amount generated in October), up from 100 mln. kWh in September. Even more importantly, the situation was radically different with respect to the prior year, when generation exceeded consumption.

The import figure for October was by far the highest from the last 12 years (since ESCO was established), occurring as Ukraine electricity exports resumed regionally, highlighting wider cross-border dynamics. In October 2017, Georgia imported 157 mln. kWh of electricity (for 5.2 ¢/kWh – 13 tetri/kWh). This constituted an 832% increase compared to October 2016, and is about 50% larger than the second largest import figure (104.2 mln. kWh in October 2014). Most of the October 2017 imports (99.6%) came from Azerbaijan, with the remaining 0.04% coming from Russia.

The main question that comes to mind when observing these statistics is: why did Georgia import so much? One might argue that this is just the result of a bad year for hydropower generation and increased demand. This argument, however, is not fully convincing. While it is true that hydropower generation declined and demand increased, the country’s excess demand could have been easily satisfied by its existing thermal power plants, even as imported coal volumes rose in regional markets. Instead of increasing, however, the electricity coming from thermal power plants declined as well. Therefore, that cannot be the reason, and another must be found. The first that comes to mind is that importing electricity may have been cheaper than buying it from local TPPs, or from other generators selling electricity to ESCO under power purchase agreements (PPAs). We can test the first part of this hypothesis by comparing the average price of imported electricity to the price ceiling on the tariff that TPPs can charge for the electricity they sell. Looking at the trade statistics from Geostat, the average price for imported electricity in October 2017 remained stable with respect to the same month of the previous year, at 5.2 ¢ (13 tetri) per kWh. Only two thermal power plants (Gardabani and Mtkvari) had a price ceiling below 13 tetri per kWh. Observing the electricity balance of Georgia, we see that indeed more than 98% of the electricity generated by TPPs in October 2017 was generated by those two power plants.

What about other potential sources of electricity amid Central Asia's power shortages at the time? To answer this question, we can use the information derived from the weighted average price of balancing electricity. Why balancing electricity? Because it allows us to reconstruct the costs the market operator (ESCO) faced during the month of October to make sure demand and supply were balanced, and it allows us to gain an insight about the price of electricity sold through PPAs.

ESCO reports that the weighted average price of balancing electricity in October 2017 was 13.8 tetri/kWh, (25% higher than in October 2016, when it was below the average weighted cost of imports – 11 vs. 13 – and when the quantity of imported electricity was substantially smaller). Knowing that in October 2017, 61% of balancing electricity came from imports, while 39% came from hydropower and wind power plants selling electricity to ESCO under their PPAs, we can deduce that in this case, internal generation was (on average) also substantially more expensive than imports. Therefore, the high cost of internally generated electricity, rather than the technical impossibility of generating enough electricity to satisfy electricity demand, indeed appears to be one the main reasons why electricity imports spiked in October 2017.

Related News

• Electricity Forum News

• Power Generation News

GMP Tesla Powerwall Program replaces utility meters with smart battery storage, enabling virtual power plant services, demand response, and resilient homes, integrating solar readiness, EV charging support, and smart grid controls across Vermont households.

Key Points

Green Mountain Power uses Tesla Powerwalls as smart meters, creating a VPP for demand response and home backup.

✅ $30 monthly for 10 years or $3,000 upfront for two units

✅ Utility controls batteries for peak shaving and demand response

✅ Enables backup power, solar readiness, and EV charging support

There are more than 100 million single-family homes in the United States of America. If each of these homes were to have two 13.5 kWh Tesla Powerwalls, that would total 2.7 Terawatt-hours worth of electricity stored. Prior research has suggested that this volume of energy storage could get us halfway to the 5.4 TWh of storage needed to let the nation get 80% of its electricity from solar and wind, as states like California increasingly turn to grid batteries to support the transition.

Vermont utility Green Mountain Power (GMP) seeks to remove standard electric utility metering hardware and replace it with the equipment inside of a Tesla Powerwall, as part of a broader digital grid evolution underway. Mary Powell, President and CEO of Green Mountain Power, says, “We have a vision of a battery system in every single home” and they’ve got a patent pending software solution to make it happen.

The Resilient Home program will install two standard Tesla Powerwalls each in 250 homes in GMP’s service area. The homeowner will pay either $30 a month for ten years ($3,600), or $3,000 up front. At the end of the ten year period, payments end, but the unit can stay in the home for an additional five years – or as long as it has a usable life.

A single Powerwall costs approximately $6,800, making this a major discount.

GMP notes that the home must have reliable internet access to allow GMP and Tesla to communicate with the Powerwall. GMP will control the functions of the Powerwall, effectively operating a virtual power plant across participating homes, expanding the scope of programs like those that saved the state’s ratepayers more than $500,000 during peak demand events last year. The utility specifically notes that customers agree to share stored energy with GMP on several peak demand days each year.

The hardware can be designed to interact with current backup generators during power outages, or emerging fuel cell solutions that maintain battery charge longer during extended outages, however, the units will not charge from the generator. As noted the utility will be making use of the hardware during normal operating times, however, during a power outage the private home owner will be able to use the electricity to back up both their house and top off their car.

The utility told pv magazine USA that the Powerwalls are standard from the factory, with GMP’s patent pending software solution being the special sauce (has a hint of recent UL certifications). GMP said the program will also get home owners “adoption ready” for solar power, including microgrid energy storage markets, and other smart devices.

Sonnen’s ecoLinx is already directly interacting with a home’s electrical panel (literally throwing wifi enabled circuit breakers). Now with Tesla Powerwalls being used to replace utility meters, we see one further layer of integration that will lead to design changes that will drive residential solar toward $1/W. Electric utilities are also experimenting with controlling module level electronics and smart solar inverters in 100% residential penetration situations. And of course, considering that California is requiring solar – and probably storage in the future – in all new homes, we should expect to see further experimentation in this model. Off grid solar inverter manufacturers already include electric panels with their offerings.

If we add in the electric car, and have vehicle-to-grid abilities, we start to see a very strong amount of electricity generation and energy storage, helping to keep the lights on during grid stress, potentially happening in more than 100 million residential power plants. Resilient homes indeed.

Related News

• Electricity Forum News

• Grid Technologies News