Pennsylvania power companies unscathed by hackers

By Michael Rubinkam, Associated Press

In Pennsylvania, each of the 11 regulated utilities that power the vast majority of the state's homes and businesses is required under state law to maintain a cyber security plan.

The good news is that hackers have not caused the lights to go out in Pennsylvania.

But have they even tried? It's unclear. State regulators and the utilities themselves won't discuss attempted breaches, citing security concerns.

Nationally, The Associated Press found that foreign hackers have been able to infiltrate power companies' computer systems about a dozen times in the last decade, potentially providing an avenue to attack the network that keep the U.S. electrical grid running.

In Pennsylvania, each of the 11 regulated utilities that power the vast majority of the state's homes and businesses is required under state law to maintain a cyber security plan designed to protect against intrusions into their computer networks.

Some things to know about regulators' and utilities' efforts to repel hacking attacks:


NO MAJOR BREACHES: Regulated power companies like PECO Energy, PPL Electric Utilities, West Penn Power and Duquesne Light are required to tell the Pennsylvania Public Utility Commission if hackers cause a power outage or more than $50,000 in damage. To date, the PUC has received no such reports, spokesman Nils Hagen-Frederiksen said.

However, the utilities don't have to notify state regulators about failed hacking attempts. Hagen-Frederiksen said power companies are encouraged to share that information, but he declined to say whether the commission has received any reports about unsuccessful attacks or minor intrusions that don't meet the reporting threshold. Nor will power companies discuss it.


SECRET PLANS: The utilities' cybersecurity plans are deemed "confidential and proprietary," and are exempt from Pennsylvania open-records laws. But state regulators have access to them at any time and typically review them during broader management audits that take place at least once every five years.

Like other big utilities, PPL, the state's No. 2 power company with 1.4 million customers in central and eastern Pennsylvania, won't reveal the specific steps it has taken to repel hackers.

"We have a coordinated defense to protect the bulk electric system ... from cyber attacks," said spokesman Paul Wirth.

FirstEnergy Corp. of Akron, Ohio, which owns four utilities (Met-Ed, Penelec, West Penn Power and Penn Power) that serve a combined 2 million customers in Pennsylvania, issued a statement that said it "has a comprehensive plan for protecting our critical cyber assets against potential attacks."


FEDERAL STANDARDS: Large power companies must also comply with federal cybersecurity standards, which are enforced by the North American Electric Reliability Corp. That body has fined utilities around the country for violating cybersecurity rules, but the identities of the violators are confidential. So it's unknown if Pennsylvania utilities have been fined.


WHAT ABOUT THE LITTLE GUYS? Pennsylvania has dozens of rural cooperatives and small municipally owned electric utilities that do not fall under state regulators' jurisdiction.

Did You Like this Article? Get All the Energy Industry News Delivered to Your Inbox

Subscribe to an email newsletter today at no cost and receive the latest news and information.

 Subscribe Now


Making DDoS Mitigation Part of Your Incident Response Plan: Critical Steps and Best Practices

Like a new virulent strain of flu, the impact of a distributed denial of service (DDoS) attack is...

The Multi-Tax Challenge of Managing Excise Tax and Sales Tax

To be able to accurately calculate multiple tax types, companies must be prepared to continually ...

Operational Analytics in the Power Industry

Cloud computing, smart grids, and other technologies are changing transmission and distribution. ...

Maximizing Operational Excellence

In a recent survey conducted by PennEnergy Research, 70% of surveyed energy industry professional...

Latest Energy Jobs

View more Job Listings >>