As cited
Copy frozen at (site build).
ot ics
Centrii warns nation-state access and renewable supply-chain risks raise energy sector financial exposure
Centrii analysis shows converging nation-state pre-positioning, ransomware attacks, and renewable energy supply-chain vulnerabilities are creating material financial and geopolitical risk for energy operators. State-linked actors including Volt Typhoon maintain persistent footholds in critical infrastructure for potential disruption rather than intelligence gathering, while Chinese-manufactured solar inverters and battery systems carry undisclosed vulnerabilities and cellular hardware that regulators now treat as structural risks. Ransomware incidents against utilities rose sharply in early 2026, with recovery costs in the millions driving measurable financial exposure alongside emerging regulatory enforcement from NIS2, NERC CIP-015, and international restrictions on foreign-linked grid equipment.
Why it matters: Energy operators, boards, and fund managers face continuous financial, regulatory, and insurance renewal risk from documented nation-state footholds, supply-chain vulnerabilities in renewable assets, and ransomware leverage; demonstrable, current evidence of operational technology monitoring and controls is now required by regulators, insurers, and acquisition due diligence. Centrii's GRIDLOCK report models a 92 percent probability of coordinated cyberattack on UK battery storage by 2031 under current practices, with potential for blackouts affecting 67 million people and billions in damage.
- Source published
- First seen by Cybersecurity Tracker