Pennsylvania utility leaders warned state lawmakers that cyberattacks on power, water and gas systems are increasing in both number and sophistication. FirstEnergy Pennsylvania reported blocking "tens of thousands" of automated malicious connection attempts each month, underscoring the scale of the threat. Officials said successful breaches could cause outages, expose customer data and raise defense, recovery and insurance costs, and urged coordinated public-private investment in cybersecurity.
Pennsylvania Utilities Say They Block "Tens of Thousands" of Monthly Cyberattack Attempts — Officials Call For Bigger Investments
Photo Credit: iStock
Utility leaders across Pennsylvania told state lawmakers that cyber threats targeting power, water and gas systems are rising in both volume and sophistication, and that strengthening defenses will require substantial, ongoing investment.
What Officials Told Lawmakers
At a hearing reported by the Pennsylvania Capital-Star, company executives said attempted intrusions against critical infrastructure have increased in number and complexity. Brian Harrell, Chief Security Officer for FirstEnergy Pennsylvania, said the company's protections block "tens of thousands of automated malicious connection attempts against public-facing services each month." He added, "These statistics underscore why cybersecurity requires constant attention and continual enhancement."
"These statistics underscore why cybersecurity requires constant attention and continual enhancement." — Brian Harrell, FirstEnergy Pennsylvania
Operational Risks Beyond IT
Speakers emphasized that the threat extends beyond office IT systems: utilities also operate control systems and industrial networks that deliver electricity, heating and safe drinking water. Those operational networks are likewise vulnerable, and a successful breach could cause outages, expose customer data, or force costly recovery and insurance actions.
Why The Risk Is Growing
Experts at the hearing noted that utilities' increasing reliance on internet-connected tools and remote-management systems expands the attack surface available to criminal groups and state-backed actors. That trend makes continuous monitoring, regular upgrades and specialized staffing essential.
Policy, Costs And Coordination
Utility leaders told lawmakers that cybersecurity is now a core operating expense, not an optional add-on. Sumit Nair, Chief Information Officer for Essential Utilities, said his company treats cyber investments the same way it treats spending on "pipes, treatment plants and distribution infrastructure." State representatives urged a coordinated response that bridges private operators, public regulators and state agencies.
These discussions come amid broader pressure on Pennsylvania utilities over grid performance, accountability and consumer protections, and they highlight how resilience now spans technical, financial and political choices.
Takeaway
Protecting essential services will require sustained funding, cross-sector collaboration, and continued public oversight to balance reliability, security and customer costs.
Help us improve.
