Attacks on Power Grids and Critical Infrastructure

How cyber attacks on power grids, pipelines and ports can disrupt whole economies, key cases abroad, and why critical infrastructure needs special protection.

Cyber attacks can disrupt physical systems.

Key cases

Ukraine’s power grid (December 2015): attackers cut power to around 2.3 lakh people, the first confirmed grid blackout from a cyber attack.
NotPetya (2017): malware spread globally, disrupting shipping giant Maersk and costing billions.
Colonial Pipeline (2021): fuel shortages on the US east coast.

India

In 2019, malware was found on a network at the Kudankulam nuclear plant’s administrative systems; officials said critical systems were unaffected.
In October 2020, a major power outage in Mumbai disrupted trains, hospitals and the stock market; a US report later suggested a possible link to cyber intrusions, which Indian officials disputed.

Why infrastructure is vulnerable

Old systems not designed for internet connections.
Connected control systems.
High impact attracts state-backed attackers.

Protection

Separating control networks from the internet.
Monitoring and drills.
National agencies like NCIIPC.

Systemic risk

One attack can cascade across transport, finance and health, affecting the whole economy.

The port shutdown

In 2017, NotPetya shut down Maersk's systems. Ports worldwide struggled to move containers for days, delaying goods far beyond the company.

Thinking cyber attacks only affect computers

They can shut down power, fuel and ports.

Key takeaways

Cyber attacks can disrupt grids, pipelines and ports.
Ukraine's 2015 blackout was the first confirmed grid attack.
NotPetya cost billions, including at Maersk.
Critical infrastructure needs special protection.