Russia, North Korea, Iran, and China currently have the capability to launch cyberattacks that could disrupt critical infrastructure
In October, CBS News interviewed Wellinghoff who discussed the attack south of San Jose, CA, of 4/16/2013.
"For 20 minutes, gunmen methodically fired at high voltage transformers at the Metcalf Power substation. Security cameras captured bullets hitting the chain link fence…. The gunmen disappeared without a trace about a minute before a patrol car arrived. The substation was down for weeks, but fortunately PG&E had enough time to reroute power and avoid disaster." It… "could've brought down all of Silicon Valley." They never caught the perpetrators, but Wellinghoff concluded "it was somebody who did have competent people who could in fact plan out this kind of a very sophisticated attack… It was actually a very shocking result to us that there's very few number of substations you need to take out, in the entire United States, to knock out the entire grid… Less than 20."
But vulnerability to gunfire isn't the most pressing concern. In October 2021, DOE Secretary Jennifer Granholm in June
told CNN that enemies of the United States have the capability to shut down the power grid, and "there are very malign actors trying, even as we speak."
The Senate Republican Policy Committee issued a
report concluding "The U.S. electric grid is vulnerable to cyberattacks that could result in catastrophic, widespread, lengthy blackouts and other loss of electrical services… Russia, North Korea, Iran, and China currently have the capability to launch cyberattacks that could disrupt critical infrastructure."
The report noted, "In 2015, the insurance underwriter Lloyd's developed a scenario for an attack on part of the Eastern Interconnection, which provides power to around half of the U.S. Under the scenario, an attack targeting power generators would cause a blackout in 15 states and the District of Columbia, leaving 93 million people without power."