National Grid CEO backs a bright idea: conservation

Power Grid Attacks surge across substations and transmission lines, straining critical infrastructure as DHS and FBI cite vandalism, domestic extremists, and cybersecurity risks impacting resilience, outages, and grid reliability nationwide.

Key Points

Power Grid Attacks are deliberate strikes on substations and lines to disrupt power and weaken grid reliability.

✅ Physical attacks rose across multiple states and utilities.

✅ DHS and FBI warn of threats to critical infrastructure.

✅ Substation security and grid resilience upgrades urged.

Even before Christmas Day attacks on power substations in five states in the Pacific Northwest and Southeast, similar incidents of attacks, vandalism and suspicious activity were on the rise.

Federal energy reports through August – the most recent available – show an increase in physical attacks at electrical facilities across the nation this year, continuing a trend seen since 2017.

At least 108 human-related events were reported during the first eight months of 2022, compared with 99 in all of 2021 and 97 in 2020. More than a dozen cases of vandalism have been reported since September.

The attacks have prompted a flurry of calls to better protect the nation's power grid, with a renewed focus on protecting the U.S. power grid across sectors, but experts have warned for more than three decades that stepped-up protection was needed.

Attacks on power stations on the rise 
Twice this year, the Department of Homeland Security warned "a heightened threat environment" remains for the nation, including its critical infrastructure amid reports of suspected Russian breaches of power plant systems. 

At least 20 actual physical attacks were reported, compared with six in all of 2021. 
Suspicious-activity reports jumped three years ago, nearly doubling in 2020 to 32 events. In the first eight months of this year, 34 suspicious incidents were reported.
Total human-related incidents – including vandalism, suspicious activity and cyber events such as Russian hackers and U.S. utilities in recent years – are on track to be the highest since the reports started showing such activity in 2011.

Attacks reported in at least 5 states
Since September, attacks or potential attacks have been reported on at least 18 additional substations and one power plant in Florida, Oregon, Washington and the Carolinas. Several involved firearms.

• In Florida: Six "intrusion events" occurred at Duke Energy substations in September, resulting in at least one brief power outage, according to the News Nation television network, which cited a report the utility sent to the Energy Department. Duke Energy spokesperson Ana Gibbs confirmed a related arrest, but the company declined to comment further.
• In Oregon and Washington state: Substations were attacked at least six times in November and December, with firearms used in some cases, local news outlets reported. On Christmas Day, four additional substations were vandalized in Washington State, cutting power to more than 14,000 customers.
• In North Carolina: A substation in Maysville was vandalized on Nov. 11. On Dec. 3, shootings that authorities called a "targeted attack" damaged two power substations in Moore County, leaving tens of thousands without power amid freezing temperatures.
• In South Carolina: Days later, gunfire was reported near a hydropower plant, but police said the shooting was a "random act."

It's not yet clear whether any of the attacks were coordinated. After the North Carolina attacks, a coordinating council between the electric power industry and the federal government ordered a security evaluation.

FBI mum on its investigations
The FBI is looking into some of the attacks, including cyber intrusions where hackers accessed control rooms in past cases, but it hasn't said how many it's investigating or where. 

Shelley Lynch, a spokesperson for the FBI's Charlotte field office, confirmed the bureau was investigating the North Carolina attack. The Kershaw County Sheriff's Office reported the FBI was looking into the South Carolina incident.

Utilities in Oregon and Washington told news outlets they were cooperating with the FBI, but spokespeople for the agency's Seattle and Portland field offices said they couldn't confirm or deny an investigation.

Could domestic extremists be involved?
In January, the Department of Homeland Security said domestic extremists had been developing "credible, specific plans" since at least 2020, including a Neo-Nazi plot against power stations detailed in a federal complaint, and would continue to "encourage physical attacks against electrical infrastructure."

In February, three men who ascribed to white supremacy and Neo-Nazism pleaded guilty to federal crimes related to a scheme to attack the grid with rifles.

In a news release, Timothy Langan, assistant director of the FBI’s Counterterrorism Division, said the defendants "wanted to attack regional power substations and expected the damage would lead to economic distress and civil unrest."

Why is the power grid so hard to protect?
Industry experts, federal officials and others have warned in one report after another since at least 1990 that the power grid was at risk, and a recent grid vulnerability report card highlights dangerous weak points, said Granger Morgan, an engineering professor at Carnegie Mellon University who chaired three National Academies of Sciences reports.

The reports urged state and federal agencies to collaborate to make the system more resilient to attacks and natural disasters such as hurricanes and storms. 

"The system is inherently vulnerable, with the U.S. grid experiencing more blackouts than other developed nations in one study. It's spread all across the countryside," which makes the lines and substations easy targets, Morgan said. The grid includes more than 7,300 power plants, 160,000 miles of high-voltage power lines and 55,000 transmission substations.

One challenge is that there's no single entity whose responsibilities span the entire system, Morgan said. And the risks are only increasing as the grid expands to include renewable energy sources such as solar and wind, he said. 

Related News

• Electricity Forum News

• Grid Technologies News

Atlanta Airport Power Outage disrupts Hartsfield-Jackson as an underground fire cripples switchgear redundancy, canceling flights during holiday travel; Georgia Power restores electricity overnight while utility crews probe causes and monitor system resilience.

Key Points

A major Hartsfield-Jackson blackout from an underground fire; power restored as switchgear redundancy is investigated.

✅ Underground fire near Plane Train tunnel damaged switchgear systems

✅ Over 1,100 flights canceled; holiday travel severely disrupted

✅ Georgia Power restored service; redundancy and root cause under review

Power has been restored at the world’s busiest airport after a massive outage Sunday afternoon left planes and passengers stranded for hours, forced airlines to cancel more than 1,100 flights and created a logistical nightmare during the already-busy holiday travel season.

An underground fire caused a complete power outage Sunday afternoon at Hartsfield-Jackson Atlanta International Airport, resulting in thousands of canceled flights at the world's busiest terminal and affecting travelers worldwide.

The massive outage didn’t just leave passengers stranded overnight Sunday, it also affected travelers with flights Monday morning schedules.

According to Paul Bowers, the president and CEO of Georgia Power,  “From our standpoint, we apologize for the inconvenience,” he said. The utility restored power to the airport shortly before midnight.

Utility Crews are monitoring the fixes that restored power and investigating what caused the fire and why it was able to damage redundant systems. Bowers said the fire occurred in a tunnel that runs along the path of the underground Plane Train tunnel near Concourse E.

Sixteen highly trained utility personnel worked in the passageway to reconnect the network.“Our investigation is going through the process of what do we do to ensure we have the redundancy going back at the airport, because right now we are a single source feed,” Bowers said.

“We will have that complete by the end of the week, and then we will turn to what caused the failure of the switchgear.”

Though the cause isn’t yet known, he said foul play is not suspected.“There are two things that could happen,” he said.

“There are inner workings of the switchgear that could create the heat that caused the fire, or the splicing going into that switchgear -- that the cable had a failure on that going into the switch gear.”

When asked if age of the system could have been a failure, Bowers said his company conducts regular inspections.“We constantly inspect,” he said. “We inspect on an annual basis to ensure the reliability of the network, and that redundancy is protection for the airport.”Bowers said he is not familiar with any similar fire or outage at the airport.

“The issue for us is to ensure the reliability is here and that it doesn’t happen again and to ensure that our network is resilient enough to withstand any kind of fire,” he said. He added that Georgia Power will seek to determine what can be done in the future to avoid a similar event, such as those experienced during regional outages in other communities.

Related News

• Electricity Forum News

• Utility Operations News

Tunisia Smart Grid Project advances with an AFD loan as STEG deploys smart meters in Sfax, upgrades grid infrastructure, boosts energy efficiency, curbs losses, and integrates renewable energy through digitalization and advanced communication systems.

Key Points

A national program funded by an AFD $131.7M loan to modernize STEG, deploy smart meters, and integrate renewable energy.

✅ 430,000 smart meters in Sfax during phase one

✅ 20-year AFD loan with 7-year grace period

✅ Cuts losses, improves efficiency, enables renewables

The Tunisian parliament has approved taking a $131.7 million loan from the French Development Agency for the implementation of a smart grid project.

Parliament passed legislation regarding the 400 million dinar ($131.7 million) loan plus a grant of $1.1 million.

The loan, to be repaid over 20 years with a grace period of up to 7 years, is part of the Tunisian government’s efforts to establish a strategy of energy switching aimed at reducing costs and enhancing operational efficiency.

The move to the smart grid had been postponed after the Tunisian Company of Electricity and Gas (STEG) announced in March 2017 that implementation of the first phase of the project would begin in early 2018 and cover the entire country by 2023.

STEG was to have received funding some time ago. Last year at the Africa Smart Grid Summit in Tunis, the company said it would initiate an international tender during the first quarter of 2019 to start the project.

The French funding is to be allocated to implementation of the first phase only, which will involve development of control and communication stations and the improvement of infrastructure, where regulatory outcomes such as the Hydro One T&D rates decision can influence investment planning in comparable markets.

It includes installation of 430,000 “intelligent” metres over three years in Sfax governorate in southern Tunisia. The second phase of the project is planned to extend the programme to the rest of the country.

Smart metres to be installed in homes and businesses in Sfax account for about 10% of the total number of metres to be deployed in Tunisia.

At the beginning of 2017, the Industrial Company of Metallic Articles (SIAM), a Tunisian industrial electrical equipment and machinery company, signed an agreement with Huawei for the Chinese company to supply smart electricity metres. The value of the deal was not disclosed.

The smart grid is designed to reduce power waste, reduce the number of unpaid bills, prevent consumer fraud such as power theft in India across distribution networks, improve the ecosystem and increase competitiveness in the electricity sector.

Experts said the main difference between the traditional and smart grids is the adoption of advanced infrastructure for measuring electricity consumption and for communication between the power plant and consumers. The data exchange allows power plants to coordinate electricity production with actual demand.

STEG previously indicated that it had implemented measures to ensure the transition to the smart grid, especially since digitalisation is playing an important role in the energy sector.

The project, which translates Tunisia’s energy plans in the form of a partnership between the public and private sectors, aims at reaching 30% of the country’s electricity need from renewable sources by 2025, even as entities like the TVA face climate goals scrutiny that can affect electricity rates in other markets.

The development of the smart grid will allow STEG to monitor consumption patterns, detect abuses and remotely monitor the grid’s power supply, at a time when regulators have questioned UK network profits to spur efficiency, underscoring the value of transparency.

“The smart grid will change the face of the energy system towards the use of renewable energies,” said Tunisian Industry Minister Slim Feriani. At the forum on alternative energies, he pointed out that energy sector digitisation requires investments in technology and a change in the consumption mentality, as new entrants consider roles like Tesla electricity retailer plans in advanced markets.

Official data indicate that Tunisia’s energy deficit accounts for one-third of the country’s annual trade deficit, which reached record levels of more than $6 billion last year.

STEG, whose debts have reached $329 million over the past eight years, a situation resembling Manitoba Hydro debt pressures in Canada, has not disclosed when and how funding would be secured for the completion of the second phase. The company insists it is working to prevent further losses and to collect its unpaid bills.

STEG CEO Moncef Harrabi, earlier this year, said: “The current situation of the company has forced us to take immediate action to reduce the worsening of the crisis and stop the financial bleeding caused by losses.”

He said the company had repeatedly asked the government to pay subsidy instalments due to the company and to enact binding decisions to force government institutions and departments to pay electricity bills, while elsewhere measures like Thailand power bill cuts have been used to support consumers.

The Tunisian government has yet to disburse the subsidy instalments due STEG for 2018 and 2019, which amount to $658 million. STEG also imports natural gas from Algeria for its power plants at a cost of $1.1 billion a year.

Related News

• Electricity Forum News

• T&D Business News

California Battery Storage is transforming grid reliability as distributed energy, solar-plus-storage, and demand response mitigate rolling blackouts, replace peaker plants, and supply flexible capacity during heat waves and evening peaks across utilities and homes.

Key Points

California Battery Storage uses distributed and utility batteries to stabilize power, shift solar, and curb blackouts.

✅ Supplies flexible capacity during peak demand and heat waves

✅ Enables demand response and replaces gas peaker plants

✅ Aggregated assets form virtual power plants for grid support

Last month as a heat wave slammed California, state regulators sent an email to a group of energy executives pleading for help to keep the lights on statewide. “Please consider this an urgent inquiry on behalf of the state,” the message said.

The manager of the state’s grid was struggling to increase the supply of electricity because power plants had unexpectedly shut down and demand was surging. The imbalance was forcing officials to order rolling blackouts across the state for the first time in nearly two decades.

What was unusual about the emails was whom they were sent to: people who managed thousands of batteries installed at utilities, businesses, government facilities and even homes. California officials were seeking the energy stored in those machines to help bail out a poorly managed grid and reduce the need for blackouts.

Many energy experts have predicted that batteries could turn homes and businesses into mini-power plants that are able to play a critical role in the electricity system. They could soak up excess power from solar panels and wind turbines and provide electricity in the evenings when the sun went down or after wildfires and hurricanes, which have grown more devastating because of climate change in recent years. Over the next decade, the argument went, large rows of batteries owned by utilities could start replacing power plants fueled by natural gas.

But that day appears to be closer than earlier thought, at least in California, which leads the country in energy storage. During the state’s recent electricity crisis, more than 30,000 batteries supplied as much power as a midsize natural gas plant. And experts say the machines, which range in size from large wall-mounted televisions to shipping containers, will become even more important because utilities, businesses and homeowners are investing billions of dollars in such devices.

“People are starting to realize energy storage isn’t just a project or two here or there, it’s a whole new approach to managing power,” said John Zahurancik, chief operating officer at Fluence, which makes large energy storage systems bought by utilities and large businesses. That’s a big difference from a few years ago, he said, when electricity storage was seen as a holy grail — “perfect, but unattainable.”

On Friday, Aug. 14, the first day California ordered rolling blackouts, Stem, an energy company based in the San Francisco Bay Area, delivered 50 megawatts — enough to power 20,000 homes — from batteries it had installed at businesses, local governments and other customers. Some of those devices were at the Orange County Sanitation District, which installed the batteries to reduce emissions by making it less reliant on natural gas when energy use peaks.

John Carrington, Stem’s chief executive, said his company would have provided even more electricity to the grid had it not been for state regulations that, among other things, prevent businesses from selling power from their batteries directly to other companies.

“We could have done two or three times more,” he said.

The California Independent System Operator, which manages about 80 percent of the state’s grid, has blamed the rolling blackouts on a confluence of unfortunate events, including extreme weather impacts on the grid that limited supply: A gas plant abruptly went offline, a lack of wind stilled thousands of turbines, and power plants in other states couldn’t export enough electricity. (On Thursday, the grid manager urged Californians to reduce electricity use over Labor Day weekend because temperatures are expected to be 10 to 20 degrees above normal.)

But in recent weeks it has become clear that California’s grid managers also made mistakes last month, highlighting the challenge of fixing California’s electric grid in real time, that were reminiscent of an energy crisis in 2000 and 2001 when millions of homes went dark and wholesale electricity prices soared.

Grid managers did not contact Gov. Gavin Newsom’s office until moments before it ordered a blackout on Aug. 14. Had it acted sooner, the governor could have called on homeowners and businesses to reduce electricity use, something he did two days later. He could have also called on the State Department of Water Resources to provide electricity from its hydroelectric plants.

Weather forecasters had warned about the heat wave for days. The agency could have developed a plan to harness the electricity in numerous batteries across the state that largely sat idle while grid managers and large utilities such as Pacific Gas & Electric scrounged around for more electricity.

That search culminated in frantic last-minute pleas from the California Public Utilities Commission to the California Solar and Storage Association. The commission asked the group to get its members to discharge batteries they managed for customers like the sanitation department into the grid. (Businesses and homeowners typically buy batteries with solar panels from companies like Stem and Sunrun, which manage the systems for their customers.)

“They were texting and emailing and calling us: ‘We need all of your battery customers giving us power,’” said Bernadette Del Chiaro, executive director of the solar and storage association. “It was in a very last-minute, herky-jerky way.”

At the time of blackouts on Aug. 14, battery power to the electric grid climbed to a peak of about 147 megawatts, illustrating how virtual power plants can rapidly scale, according to data from California I.S.O. After officials asked for more power the next day, that supply shot up to as much as 310 megawatts.

Had grid managers and regulators done a better job coordinating with battery managers, the devices could have supplied as much as 530 megawatts, Ms. Del Chiaro said. That supply would have exceeded the amount of electricity the grid lost when the natural gas plant, which grid managers have refused to identify, went offline.

Officials at California I.S.O. and the public utilities commission said they were working to determine the “root causes” of the crisis after the governor requested an investigation.

Grid managers and state officials have previously endorsed the use of batteries, using AI to adapt as they integrate them at scale. The utilities commission last week approved a proposal by Southern California Edison, which serves five million customers, to add 770 megawatts of energy storage in the second half of 2021, more than doubling its battery capacity.

And Mr. Zahurancik’s company, Fluence, is building a 400 megawatt-hour battery system at the site of an older natural gas power plant at the Alamitos Energy Center in Long Beach. Regulators this week also approved a plan to extend the life of the power plant, which was scheduled to close at the end of the year, to support the grid.

But regulations have been slow to catch up with the rapidly developing battery technology.

Regulators and utilities have not answered many of the legal and logistical questions that have limited how batteries owned by homeowners and businesses are used. How should battery owners be compensated for the electricity they provide to the grid? Can grid managers or utilities force batteries to discharge even if homeowners or businesses want to keep them charged up for their own use during blackouts?

During the recent blackouts, Ms. Del Chiaro said, commercial and industrial battery owners like Stem’s customers were compensated at the rates similar to those that are paid to businesses to not use power during periods of high electricity demand. But residential customers were not paid and acted “altruistically,” she said.

Related News

• Electricity Forum News

• Grid Technologies News

Japan Electricity Crunch exposes vulnerabilities in a liberalised power market as LNG shortages, JEPX price spikes, snow-hit solar, and weak hedging strain energy security and retail providers amid cold snap demand and limited reserve capacity.

Key Points

A winter demand shock and LNG shortfalls sent JEPX to records, exposing gaps in hedging, data, and energy security.

✅ JEPX wholesale prices spiked to an all-time high

✅ LNG inventories and procurement proved insufficient

✅ Snow disabled solar; new entrants lacked hedging

Japan's worst electricity crunch since the aftermath of the Fukushima crisis has exposed vulnerabilities in the country's recently liberalised power market, although some of the problems appear self-inflicted.

Power prices in Japan hit record highs last month, mirroring UK peak power prices during tight conditions, as a cold snap across northeast Asia prompted a scramble for supplies of liquefied natural gas (LNG), a major fuel for the country's power plants. Power companies urged customers to ration electricity to prevent blackouts, although no outages occurred.

The crisis highlighted how many providers were unprepared for such high demand. Experts say LNG stocks were not topped up ahead of winter and snow disabled solar power farms, while China's power woes strained solar supply chains.

The hundreds of small power companies that sprang up after the market was opened in 2016 have struggled the most, saying the government does not disclose the market data they need to operate. The companies do not have their own generators, instead buying electricity on the wholesale market.

Prices on the Japan Electric Power Exchange (JEPX) hit a record high of 251 yen ($2.39) per kilowatt hour in January, equating to $2,390 per megawatt hour of electricity, above record European price surges seen recently and the highest on record anywhere in the world. One megawatt hour is roughly what an average home in the U.S. would consume over 35 days.

But the vast majority of the new, smaller companies are locked into low, fixed rates they set to lure customers from bigger players, crushing them financially during a price spike like the one in January.

More than 50 small power providers wrote on Jan. 18 to Japan's industry minister, Hiroshi Kajiyama, who oversees the power sector, asking for more accessible data on supply and demand, reserve capacity and fuel inventories.

"By organising and disclosing this information, retail electricity providers will be able to bid at more appropriate prices," said the companies, led by Looop Co.

They also called on Kajiyama to require transmission and distribution companies to pass on some of the unexpected profits from price spikes to smaller operators.

The industry ministry said it had started releasing more timely market data, and is reviewing the cause of the crunch and considering changes, echoing calls by Fatih Birol to keep electricity options open amid uncertainty.

Japan reworked its power markets after the Fukushima nuclear disaster in 2011, liberalizing the sector in 2016 while pushing for more renewables.

But Japan is still heavily reliant on LNG and coal, and only four of 33 nuclear reactors are operating. The power crisis has led to growing calls to restart more reactors.

Kazuno Power, a small retail provider controlled by a municipality of the same name in northern Japan, where abundant renewable energy is locally produced, buys electricity from hydropower stations and JEPX.

During the crunch, the company had to pay nearly 10 times the usual price, Kazuno Power president Takao Takeda said in an interview. Like most other new providers, it could not pass on the costs, lost money, and folded. The local utility has taken over its customers.

"There is a contradiction in the current system," Takeda said. "We are encouraged to locally produce power for local consumption as well as use more renewable energy, but prices for these power supplies are linked to wholesale prices, which depend on the overall power supply."

The big utilities, which receive most of their LNG on long-term contracts, blamed the power shortfall on a tight spot market and glitches at generation units.

"We were not able to buy as much supply as we wanted from the spot market because of higher demand from South Korea and China, where power cuts have tightened supply," Kazuhiro Ikebe, the head of the country's electricity federation, said recently.

Ikebe is also president of Kyushu Electric Power, which supplies the southern island of Kyushu.

Utilities took extreme measures - from burning polluting fuel oil in coal plants to scavenging the dregs from empty LNG tankers - to keep the grid from breaking down.

"There is too much dependence on JEPX for procurement," said Bob Takai, the local head of European Energy Exchange, where electricity pricing reforms are being discussed, and which started offering Japan power futures last year. He added that new entrants were not hedging against sharp price moves.

Three people, who requested anonymity because of the sensitivity of the matter, were more blunt. One called the utilities arrogant in assuming they could find LNG cargoes in a pinch. Prices were already rising as China snapped up supplies, the sources noted.

"You had volatility caused by people saying 'Oh, well, demand is going to be weak because of coronavirus impacts' and then saying 'we can rely more on solar than in the past,' but solar got snowed out," said a senior executive from one generator. "We have a problem of who is charge of energy security in Japan."

Inventories of LNG, generally about two weeks worth of supplies, were also not topped up enough to prepare for winter, a market analyst said.

The fallout from the crunch has become more apparent in recent days, with new power companies like Rakuten Inc suspending new sales and Tokyo Gas, along with traditional electricity utilities, issuing profit downgrades or withdrawing their forecasts.

Although prices have fallen sharply as temperatures warmed up slightly and more generation units have come back online, the power generator executive said, "we are not out of the woods yet."
 

Related News

• Electricity Forum News

• Power Generation News

NERC COVID-19 Grid Security Alert urges utilities to update business continuity plans, assess supply chain risk, and harden cybersecurity against spearphishing, social engineering, and remote-work vulnerabilities to protect the U.S. power grid and critical infrastructure.

Key Points

A notice urging U.S. utilities to fortify pandemic continuity, secure supply chains, and enhance cybersecurity.

✅ Mandates updates to business continuity and pandemic readiness plans

✅ Flags supply chain risks for PPE, electronics, chemicals, and logistics

✅ Warns of spearphishing, social engineering, VPN and remote-work threats

The top U.S. grid security monitor urged power utilities to prepare for the new coronavirus in a rare alert yesterday, adding to a chorus of warnings from federal and private organizations.

The North American Electric Reliability Corp. called for power providers to update business continuity plans in case of a pandemic outbreak and weigh the need to prioritize construction or maintenance projects, including updates on major projects like BC Hydro's Site C, while the COVID-19 virus continues to spread.

NERC is requiring electric utilities to answer questions on their readiness for a possible pandemic, including potential staffing strategies such as on-site sequestering, by March 20, an unusual step that underscores the severity of the threat to U.S. power systems.

The Electricity Information Sharing and Analysis Center, NERC's hub for getting the word out on dangers and vulnerabilities for the grid, also sent out an "all-points bulletin" on Feb. 5 addressing the coronavirus outbreak. That nonpublic document covered "potential supply chain issues stemming from a manufacturing slowdown in Asia," NERC spokeswoman Kimberly Mielcarek said.

Among offering basic hygiene and awareness recommendations, NERC's latest alert also encourages utilities to take stock of resources with supply chains affected by the virus. Because "China and nearby southeast Asian nations" have been impacted, NERC said, the supply chain hits will likely include "electronics, personal protective equipment and sanitation supplies, chemicals, and raw materials." The nonprofit grid overseer also warned of global transportation disruptions.

NERC also recommended utilities be on the lookout for cyberattacks taking advantage of the panic and using "coronavirus-themed opportunistic social engineering attacks" to hack into power companies' networks. Social engineering attacks are when hackers use social interactions to manipulate targets into giving up sensitive information.

"Spearphishing, watering hole, and other disinformation tactics are commonly used to exploit public interest in significant events," the alert said.

Electric utility representatives said they're working on or have already completed some of the steps outlined in NERC's alert, though nuclear plant workers have cited a lack of precautions in some cases.

"At this point, many of our members are activating and/or reviewing their business continuity and preparedness plans to ensure that operations and infrastructure are properly supported," said Tobias Sellier, director of media relations for the American Public Power Association, which represents around 1,400 electric utilities.

The power providers are also collaborating with other utilities such as "water, wastewater and gas," Sellier said.

Stephen Bell, senior director of media and public relations at the National Rural Electric Cooperative Association, said his group's members "have already taken a number of steps recommended by NERC" while continuing to maintain operations.

"Co-ops continue working with local, state and federal stakeholders to remain vigilant and prepared. These preparations include more frequent communications to key stakeholders, updating business continuity plans and monitoring new information from public health officials," said Bell.

Last week the Electricity Subsector Coordinating Council (ESCC), a panel of government and industry officials charged with responding to power-sector emergencies, scheduled a conference call discussing how to protect the grid from disruption if the virus infects system operators. Ohio-based utility American Electric Power Co. said it is limiting public visits, has created a high-level response team and is working to ensure operations can continue, while reinforcing downed power line safety, if the virus keeps spreading (Energywire, March 6).

Scott Aaronson, vice president for security and preparedness of the Edison Electric Institute, which represents major investor-owned utilities, said that the electric sector practices "contingency planning" to deal with unusual situations such as the coronavirus. That means that while the type of emergency may be new, dealing with an emergency situation is not, he said. Aaronson added that many of NERC's recommendations are based on what companies are already doing.

"We have heightened awareness given the circumstances, and we have messaging to employees all the way up and down the chain — from CEOs to frontline workers — that: given this time of heightened awareness and potential vulnerability, we have to practice hygiene both of the personal and cyber variety," said Aaronson.

Aaronson said that the ESCC had another call this week with the departments of Energy and Homeland Security and the Centers for Disease Control and Prevention to stay on top of the issue.

Hacking concerns
In a cybersecurity event yesterday, Lisa Monaco, co-chair of the Aspen Cybersecurity Group and former homeland security adviser during the Obama administration, warned that the coronavirus should be considered a national security threat.

"Frankly, [pandemic] is the thing that kept me up at night amongst many, many things that kept me up at night for four years in the White House," Monaco said.

Monaco went on to say the virus will strain organizations' IT infrastructure as more employees work remotely and households face higher electricity bills, and lead to "potentially more vulnerabilities for bad actors when it comes to cybersecurity."

On Friday, the DHS's Cybersecurity and Infrastructure Security Agency released advice on steps that can be taken to lessen the virus's impact on supply chains and cybersecurity, as well as tips for defending against scams exploiting coronavirus fears.

Cybersecurity firms also have been reporting a dramatic increase in spear-phishing attacks, with hackers reportedly using the coronavirus topic as a lure to trick victims into clicking a malicious link. Whether it's hackers aiming at industries susceptible to shipping disruptions, attacking countries like Italy hit particularly hard by the virus or even masquerading as the World Health Organization, cybercriminals are taking full advantage of the crisis, experts say.

Greg Young, vice president of cybersecurity at Trend Micro, said businesses should continue to expect an increase in targeted phishing attacks.

"With a large majority of businesses switching to a work-from-home model and less emphasis on in-person meetings, we also anticipate that malicious actors will start to impersonate digital tools such as 'free' remote conferencing services and other cloud computing software," said Young.

Working from home can be especially risky, as often home networks are less secure than corporate offices, Young said — meaning a hacker aiming to get into an enterprise network could find an "easier attack path" from a home office.

The Department of Energy is asking employees to make sure they can work remotely when needed, even as some agencies set limits with EPA telework policy, including updating security questions and asking those with government-furnished laptops to be sure they have a VPN, or virtual private network, account. In a post added this week to the agency's website, Chief Information Officer Rocky Campione said the department over the next two weeks will be initiating steps to ensure there is adequate network capacity to carry out DOE's work.

"Ensuring the continued operations of the department's many varied missions requires diligence," Campione said.

Related News

• Electricity Forum News

• Workforce Safety News