A widespread blackout across the Iberian Peninsula has raised concerns about the threat of cyberattacks on energy grids. However, initial investigations have found no evidence of a cyberattack being responsible for the power outage.
Millions of people in Spain and Portugal experienced a major power outage on Monday, causing significant travel disruptions and bringing much of the economy to a standstill. The sudden blackout led many experts to question whether the disruption could have been caused by a cyberattack.
However, Red Eléctrica, the Spanish electricity grid operator, has said that its early investigation showed “no intrusion” into the system. European Council President Antonio Costa also noted that there were no indications of a cyberattack. Despite this, Spanish Prime Minister Pedro Sánchez has stressed that there is “no hypothesis being ruled out” with regards to the cause of the blackouts.
Cybersecurity experts have long warned that electrical grids and critical energy infrastructure systems are vulnerable to cyberattacks and are often targeted by malicious state and non-state actors. The global transition to renewable energy systems is also creating new vulnerabilities, a concern that has been widely echoed by national authorities around the world.
Experts note that cyber resilience must be integrated into every aspect of electrical grids and other utility systems. “It is essential that these emerging energy systems are designed with security as a foundational priority,” said the Global Cybersecurity Outlook 2025. “Otherwise, in the effort to address an existential crisis with urgency, an isolated approach will no longer suffice to secure and achieve a resilient ecosystem.”
The increasing complexity of supply chains has further complicated the cybersecurity landscape. The energy and utility industry has faced more organized cyberattacks with widely reported ramifications. The evolution of technology has reshaped the electricity industry, ushering in smarter grids, the integration of renewable energy, and improved operational efficiencies. However, these advancements have increased the complexity of the electricity supply chain, creating new challenges in safeguarding intricate systems from cyber threats.
In response to the growing threat, the World Economic Forum launched an initiative to improve the cyber resilience of the global electricity infrastructure. The initiative works to advance best practices in the sector and harmonize regulations. However, experts maintain that no organization can operate in isolation and that cybersecurity is a tangible commitment that must be demonstrated throughout the energy value chain.
The Iberian blackout highlights the ongoing threat of cyberattacks on energy grids, despite initial findings ruling out a cyberattack as the cause of the power outage. Experts emphasize the need for integrated cyber resilience strategies, supply chain security measures, and regulatory harmonization to safeguard critical infrastructure from these threats.
Source: https://www.weforum.org/stories/2025/05/spain-might-not-cyberattack-blackout-power-outage-electric-grids-vulnerable