--:-- Noelle King: 72 hours after someone shot up a power substation in Moore County, North Carolina late last year, the authorities said they were moving quickly, leaving zero stones unturned.
--:-- Catherine Morehouse: Our tip line has been very, very active in the last 24 hours. But as active as that tip line has been, more than two months later, authorities in North Carolina haven't made an arrest. And in fact, they're now trying to find out who's responsible for another attack on another substation about an hour away from Moore County back in January.
--:-- Noelle King: The number of attacks on the power grid in the U.S. is rising. The FBI warns about white supremacists targeting it, but some of the attacks haven't had anything to do with extremism. They're cases of vandalism or attempts to cause chaos in order to make it easier to rob stuff, or, just as often as in North Carolina, we don't know.
--:-- Catherine Morehouse: Coming up on Today Explained, criminals collectively have figured out that the American power grid is the definition of an easy target.
--:-- [Support for Today Explained from Saks Fifth Avenue]
--:-- Noelle King: This is very Sean. This is very Sean-coded. Gucci loafers. Saks says Saks makes shopping feel totally customized to you, whether that's from an in-store stylist or a visit to Saks.com, where they can show you just what you want to see.
--:-- [Support for Today Explained from Sierra.ai]
--:-- Noelle King: AI agents are getting pretty impressive. You might not even realize you're listening to one right now. We work 24-7 to resolve customer inquiries. No hold music, no canned answers, no frustration. Visit sierra.ai to learn more.
--:-- Noelle King: It's Today Explained. I'm Noelle King. Tell me your name and what you do.
--:-- Catherine Morehouse: My name is Catherine Morehouse, and I'm a reporter at Politico, where I cover mostly the electric power grid and federal regulations and issues surrounding the power system.
--:-- Noelle King: Every few months, it seems like we get a new story about someone who either attacks a power substation or plans to attack a power substation. What's happening? I mean, first of all, it seems that way because we actually are seeing a pretty significant uptick in these physical or cyber, in some cases, incidents against the grid.
--:-- Catherine Morehouse: Last year, utilities actually reported 169 of these incidents in total, which is more than we've seen in the past decade, according to an analysis of DOE data. That 169 number is actually a 74 percent rise in incidents just over last year.
--:-- Noelle King: A number of utility companies have reached out to federal authorities in recent days about recent or past instances of sabotage. And, Michael, all are being reviewed.
--:-- Catherine Morehouse: And there have been other really high-profile incidents that also, unfortunately, have really impacted people. Police say multiple power stations were shot up in an act of sabotage that knocked out power to thousands of homes in near freezing temperatures. The FBI is now involved.
--:-- Noelle King: Four power substations in Washington state vandalized, including one found set ablaze overnight, knocking out power on Christmas. Power is very important to our daily lives. It's keeping the heat on. It's keeping the air conditioning on.
--:-- Catherine Morehouse: So you can imagine on a really hot or really cold day, the grid is out, you know, in Texas, we saw that even led to deaths in some instances. And kind of the broader instance, this 169 number that I mentioned, that could include a range of things. Copper theft is really common and other forms of vandalism or sabotage at these stations and not necessarily, you know, lead to the kind of power outages that we're seeing again in these more high-profile instances.
--:-- Noelle King: The latest attempts did involve a couple with ties to neo-Nazis, and it was thwarted by authorities before they had the chance to cause this major outage in Maryland.
--:-- Catherine Morehouse: The Justice Department has charged a Maryland woman and a neo-Nazi leader from Florida with allegedly plotting to attack Baltimore's power grid. According to a criminal complaint, Sarah Beth Clendaniel spent months conspiring with Brandon Russell to shoot multiple power stations.
--:-- Noelle King: According to the Southern Poverty Law Center, the Atomwaffen is a terroristic neo-Nazi organization with the main aim of ushering in the collapse of civilization so a white ethnostate or whites-only utopia can be constructed in its wake.
--:-- Catherine Morehouse: And according to the criminal complaint that was filed, it charged a pair with conspiracy to destroy an energy facility and this pair actually met in prison. And that complaint says that the pair believed that attacks on a handful of substations would basically lead to a cascading failure throughout the grid, and their goal was kind of to sow maximum chaos.
--:-- Noelle King: Russell provided instructions and location information. He described attacking the power transformers as the greatest thing somebody can do. The FBI said the suspects had racially and ethnically motivated extremist views and wanted to destroy the entire city.
--:-- Catherine Morehouse: So Clint Daniel told an FBI confidential informant about plans to attack five substations. In her own words, Clint Daniel said she was determined to do this. She added, it would lay this city to waste. Ultimately, that's how they were caught, is through going through this informant.
--:-- Noelle King: And there have been other instances as well where folks with neo-Nazi or white supremacy ties have been thwarted in their attempts to take down the grid. For instance, last year, three men pled guilty to a plot to take down the grid in the name of white supremacy.
--:-- Catherine Morehouse: The plan was essentially to sabotage three different electric substations across the U.S. to kind of sow unrest, cost the government money, and lead to, quote, a race war, which is how they described it.
--:-- Noelle King: Four men in North Carolina were also charged in 2021 with a similar conspiracy to attack this critical energy infrastructure while espousing neo views.
--:-- Catherine Morehouse: But of course, on the other side of it, ultimately, the pair that was charged in Washington state for instance, they were not connected with neo-Nazis or alt-right or anything like that. Their motive was robbery. They were hoping to rob places nearby and wanted to cause an outage to kind of assist in that.
--:-- Noelle King: Okay, so some of these are thwarted by authorities, but some of these attacks have actually happened. Tell us about those.
--:-- Catherine Morehouse: The Duke Energy incidents, for instance, in North Carolina, In that case, around 45,000 customers lost power after two different power substations were shot. More than 30,000 people are still in the dark this morning.
--:-- Noelle King: Some crucial places, like the sheriff's office here, are running on backup generator power. An official tells me that the damage to these substations was so severe that some of the parts have to be completely replaced, and it takes time to ship those replacements in.
--:-- Catherine Morehouse: In North Carolina, the authorities have not made any arrests that we know of. It appears that they are still looking for the people who took down the grid there. We haven't seen any evidence on who might have done that or what their motivations might have been.
--:-- Noelle King: And then on Christmas Day, there were four power substations taken down in Washington state, which left about 14,000 people without power. Officials at one of the substations say they arrived to find a fire that was set intentionally.
--:-- Catherine Morehouse: At others, they say there was forced entry and equipment was vandalized, causing a power outage. Two people were charged in the attacks in the Washington substation. One man told law enforcement that he and another person had planned to disrupt power in the area and to commit a burglary, according to court documents.
--:-- Noelle King: And again, that attack left thousands of people without power. So some of the attacks that have actually happened, in fact, a significant number, they have not been about white supremacy. They've been about other things.
--:-- Catherine Morehouse: The FBI, though, says white supremacy is a through line here. It is a trend here. Why do you think the authorities are saying it's a trend if many of the attacks that happen are not carried out by white supremacists or people with neo-Nazi ideology?
--:-- Noelle King: Yeah, I think because they've uncovered enough plots with the intent of taking down the grid. And in many of these incidents, they haven't actually found people who are responsible for these attacks and haven't been able to assign a motive.
--:-- Catherine Morehouse: I think for them it's maybe a jump but not a far jump to say that among the many instances that they have kind of where they have been able to foil these plots, some of those plots were not foiled and in fact did lead to, you know, some sort of attack on the grid.
--:-- Noelle King: Is there a broad awareness that there's vulnerability here? And how are the federal government, the state government, local governments, how are they responding? Is there a sense that we should just post a couple armed guards outside of every substation in America?
--:-- Catherine Morehouse: Yeah, it's funny you say that because that's pretty much the exact question that the now chairman of FERC, which is in charge of maintaining the reliability of the bulk power system, he asked that exact same question. Is the expectation that we can protect these assets all the time?
--:-- Noelle King: Are we going to have armed guards at every substation, every transformer in the country in order to make sure this doesn't happen? Or is there some different level of expectation?
--:-- Catherine Morehouse: I think that federal regulators are increasingly aware that this is an issue and increasingly concerned about the vulnerability of some of these parts of the grid. But at the same time, the question is, you know, how much ratepayer money?
--:-- Noelle King: Because remember, utilities, when they make these big updates, they're charging us as consumers through our electricity bills to make those updates. How much do we want to charge ratepayers for these updates and for, you know, protecting a facility when not all facilities are the same in terms of how they could impact large parts of the grid?
--:-- Catherine Morehouse: And so I think that there's – these incidents have certainly made federal regulators and states in some instance want to go farther. But I think that we're far from, you know, posting armed guards at every substation because that would be just incredibly expensive.
--:-- Noelle King: This is just like the North Carolina Utility Commission. They're extremely concerned. Their big concern was cost. How are we going to make people pay for this?
--:-- Catherine Morehouse: So I hope we can use some of all that money that's in that infrastructure act to start defraying some of the cost of the hardening that we know is going to have to take place.
--:-- Noelle King: And so, I mean, without asking you to predict because you're a reporter, do you think there is a broad solution to this problem? Or do you think we're going to see this go on sporadically until something catastrophic happens?
--:-- Catherine Morehouse: It almost seems like we may be barreling toward a disaster here. It will be interesting to see, you know, what comes out of the subsequent investigations here.
--:-- Noelle King: You know, after there was a threat in 2013 against Pacific Gas and Electric, and after that incident, we saw a much bigger emphasis on physical protections and physical standards.
--:-- Catherine Morehouse: Obviously, there are still some holes in the system, as you noted, because we're once again, you know, several years later seeing even more of those incidents.
--:-- Noelle King: But I think it will be interesting to see, you know, what vulnerabilities federal regulators and federal reliability standards makers ultimately find in their investigation.
--:-- Catherine Morehouse: And, you know, I do think that there are things that you can do to make a system more secure, right? I don't think it's a doomed cause, but there are also always people who are wanting to kind of disrupt the system.
--:-- Noelle King: I guess if there's one maybe positive thing, regulators have been warning about this kind of vulnerability since the 80s. And thus far, we've managed to, whether it's through the FBI thwarting these attacks or whether it's from increased security, we've managed to kind of stave off some of the worst impacts.
--:-- Catherine Morehouse: And we do know that our most critical assets are really, really well protected. I guess it remains to be seen, you know, whether any of these incidents are successful and how far kind of federal and state authorities are willing to go in making sure the most vulnerable parts of our system are protected.
--:-- Noelle King: That was Catherine Morehouse of Politico. Coming up next, what makes the power grid so vulnerable?
--:-- [Support for Today Explained from Built Rewards]
--:-- Noelle King: AI agents are getting pretty impressive. You might not even realize you're listening to one right now. We work 24-7 to resolve customer inquiries. No hold music, no canned answers, no frustration. Visit sierra.ai to learn more.
--:-- Noelle King: It's Today Explained. We're back with Jonathan Munkett. He's a principal at Converge Strategies, a consulting company that focuses on energy and national security.
--:-- Jonathan Munkett: It's definitely been something at the forefront of my mind for a long time. I asked him, what makes the grid so vulnerable?
--:-- Noelle King: Right now, the way the grid is designed, it's built with what's called an N-1 level of reliability, which is you could remove any individual component, meaning a specific node, a substation, a transmission line, a distribution line, and the grid should be able to solve around that problem.
--:-- Jonathan Munkett: It'll continue to work. You'll find an alternate path. You'll find another way to get it done. But essentially what we see in a type of targeting like this couple in Baltimore, you know, if they're looking at five different substations, that's obviously well beyond the contingency that utilities are really supposed to plan for.
--:-- Noelle King: What do these substations look like? Certainly they're very unsightly, which is one of the reasons why where these are located tend to be either away from where people live or if they are close to where people live, companies typically try to obscure them because nobody wants to live next to one of these things.
--:-- Jonathan Munkett: Essentially, you're looking at a fence line and inside of it is really just a complex network of machinery and components that are really there to make sure that you're maintaining stability of the electricity flow in that particular area.
--:-- Noelle King: These sites can be pretty physically vulnerable. I'm here at the site in Carthage. That was one of the sites that was targeted this weekend, but it does have a fence behind it. But the rest of the station still very visible to a person with a gun that's looking to fire at it.
--:-- Jonathan Munkett: Many substations remain vulnerable targets, like this one we found in Southern California that serves more than 300,000 customers, huge transformers protected by a chain link fence.
--:-- Noelle King: And essentially, it's just there to take it from one voltage level to another so that it can be usable by consumers that live close to those substations.
--:-- Jonathan Munkett: Does the fact that they're out of sight, out of mind, out of necessity, one might say, because nobody wants to look at them, does that make them more vulnerable? In some ways, it really does, because essentially there's no style points when it comes to substations. It's pure function over form in terms of how they're designed.
--:-- Noelle King: One of the challenges, though, is when you're looking at the expense associated with building a substation, upgrading a substation, maintaining a substation, it's significant. It's a major asset for a utility.
--:-- Jonathan Munkett: And the hard part is everything's expensive. And so when you're making decisions about what you're going to spend money on, essentially what you want is that initial function above everything else, which is making sure that there's adequate number of transformers that are there to handle the amount of capacity that it needs to deliver to customers.
--:-- Noelle King: And so it really takes that mentality first. And then there's a lot of questions about what other things you can do to make sure that it's more secure. And that's where the price tag starts to go up very, very quickly.
--:-- Jonathan Munkett: Does the level of security at these substations, is it adequate given how vital these places are? I think generally speaking, the security falls below what we would normally expect for something that's that important.
--:-- Noelle King: Now, what I will say is that utilities aren't just leaving the front door open, right? And just letting anybody walk in there that wants to. I think the biggest challenge that they have is the sheer volume of substations that are out there.
--:-- Jonathan Munkett: There are almost 80,000 substations in the United States. There are so many of these facilities out there. And the hard part is you can't harden all of them all the way, all the time, and have everything that you want for physical protection because it really just becomes cost prohibitive when you consider what it takes in order to protect these.
--:-- Noelle King: So I think generally speaking, what needs to happen is the baseline needs to come up, meaning that just kind of the entry level of physical security that's necessary for substations has been demonstrated in these recent events to just be insufficient for what we would expect, given the importance of those assets.
--:-- Jonathan Munkett: Yeah, it sounds like if I'm one of the bad gals, all I need is a rifle and some bolt cutters, and I'm on my way to causing a lot of trouble.
--:-- Noelle King: Yeah, unfortunately, I think that's really been demonstrated to be true, which is it does not require a lot of sophistication. It really requires simple tools that are readily available to really anyone who wants to perpetrate this type of attack.
--:-- Jonathan Munkett: And unfortunately, the methods are being more widely shared. CBS News obtained a federal law enforcement bulletin that says Oregon and Washington state experienced physical attacks on substations using hand tools, arson, firearms and metal chains, possibly in response to an online call for attacks on critical infrastructure.
--:-- Noelle King: So there are forums online. There are places that people can go that if they want to learn more about what it takes to try and disrupt a substation.
--:-- Jonathan Munkett: Just trying to damage anything in the substation is not always gonna bring about the result that somebody who's attacking it would want to have. So having a little bit of knowledge about what components are most important what pieces of those substations are most likely to cause an outage or cause a problem Those are the types of things that if they learn and they have access to these simple tools already it not particularly difficult
--:-- Noelle King: Who is doing this? Who is organizing people online about how to attack power substations?
--:-- Jonathan Munkett: A lot of the recent events have been perpetrated by what we call HVEs, homegrown violent extremists.
--:-- Noelle King: The FBI says the man behind the Christmas Day suicide bombing in Nashville was fueled by conspiracies and paranoia.
--:-- Jonathan Munkett: The explosion damaged 41 buildings and knocked out part of AT&T's communication system across the state. A top former energy official claims an attack on an American power grid was terrorism.
--:-- Noelle King: One or more snipers opened fire, knocking out 17 transformers that send power to California's Silicon Valley.
--:-- Jonathan Munkett: So whether that's white supremacists or neo-Nazis, it's really just a group of people that are looking to essentially undercut the general faith and confidence in government.
--:-- Noelle King: What's interesting is that even though it's not typically run by government, the grid is largely owned and operated by the private sector. It serves as kind of a proxy for government competence.
--:-- Jonathan Munkett: So when critical infrastructure systems fail, right, when there's a big outage in North Carolina or there's a big outage in Texas like we've seen in the last couple of years, it's the governor who gets called on the carpet, even though they're not the one who runs the grid.
--:-- Noelle King: They see this as kind of a proxy for government. And that makes it a very lucrative target for HVEs because the ease of access and really the potential consequences to government officials, it just helps them achieve either social or political goals with a very low threshold in terms of the point of entry for sophistication.
--:-- Jonathan Munkett: We were talking about some of these recent attacks that have been thwarted by federal authorities, the FBI, which is really, really interesting. How is the FBI copping on to the fact that these attacks are being planned?
--:-- Noelle King: If it's a lone wolf actor, right, it's just an independent person that's out there doing their thing. There's essentially some limitations associated with the legal pathways that are available to prosecute or investigate individuals in this particular space.
--:-- Jonathan Munkett: Now, without a doubt, there are stiff federal laws related to attacking infrastructure, no matter what. So if it does happen or when it does happen, they can throw the book at them. But obviously, you don't want to wait until the terrible thing happens first.
--:-- Noelle King: And so when you look at kind of the confluence of these, really like the Venn diagram of the people that are plotting for these types of things, people that are incentivized to do these types of things, it gets back to that domestic terrorism, that homegrown violent extremist, and that infrastructure terrorism. that really speaks to really the network of planning that happens around these types of things.
--:-- Jonathan Munkett: They have to get the equipment from somewhere. They have to get the knowledge and expertise necessary to execute the attack from somewhere. And there's a level of organization that's necessary for targeting infrastructure that at least gives law enforcement authorities a little bit more ability to investigate these types of things because there are those forms where that information is being shared.
--:-- Noelle King: There are places where people are being radicalized and see this as a pathway to achieve a political objective.
--:-- Jonathan Munkett: Do you think from what you've seen, is security enough of a priority? Physical security, especially in recent years, in the last decade, doesn't have anywhere near the prominence of both the level of awareness within the general public or the level of funding that's been dedicated to it as cybersecurity has.
--:-- Noelle King: Cybersecurity and security professionals in that particular area have done a stellar job, honestly, of raising the overall public awareness of cybersecurity risk.
--:-- Jonathan Munkett: I don't think you could find a person anywhere at this point that doesn't acknowledge the fact that cybersecurity is real, and it's potentially a problem. When it comes to physical security, I think what's been interesting is they're just really haven't outside of things just like routine theft, there hasn't been a lot of physical security risks to great infrastructure.
--:-- Noelle King: But now what we're seeing in the last couple of years and really especially in the last, you know, 12 to 18 months is it's raising in prominence because it's being taken advantage of. The lack of physical security is now being seen.
--:-- Jonathan Munkett: And so I think when it comes to security as a priority, physical security has not raised to the level of prominence that cyber has. And so what are some possible solutions as you see them? Aside from just like put an armed guard in front of every power substation, how do we fix this problem.
--:-- Noelle King: So understanding that in an average substation, a chain link fence with cameras that are not being monitored in real time and is an unmanned facility, that's probably not going to cut it anymore. That's not going to be enough.
--:-- Jonathan Munkett: Now, there are substations, and I live close to one, that is heavily protected with tall ballistic walls that are impenetrable to any readily available weapon that somebody would just try and shoot at it. You can't get in it. You can't shoot at it, you can't even see it from the street because they recognize the importance of the substation.
--:-- Noelle King: So somewhere in there is going to be this tiered approach of saying, okay, well, if we have almost 80,000 of these substations, we have to get better from the bottom up. The lowest level of security that currently exists today for substations isn't enough.
--:-- Jonathan Munkett: And then there just needs to be a clear understanding of where that cost-benefit tier really exists of saying this is enough to get us at least to a risk reduction level that's acceptable, but it's never going to be impenetrable.
--:-- Noelle King: Today's show was produced by Victoria Chamberlain and edited by Matthew Collette. It was fact-checked by North Carolina's own Laura Bullard and engineered by Patrick Boyd, who also lives in North Carolina. I'm Noelle King. It's Today Explained.
