Our proprietary threat diagnostic system shows an increase in malicious activity targeting the energy sector in recent years. This assessment is supported by data from other leading organizations - Microsoft’s 2025 digital defense report notes that energy is among the top 10 sectors targeted by state-sponsored threat actors[1], while Trustwave reported an 80% year-over-year increase in ransomware attacks against energy and utilities.[2]
This activity can be explained by a few key factors. First, the critical role of energy infrastructure makes the sector vulnerable to extortion. Financially motivated threat actors exploit the sector’s need for continuity and availability, launching ransomware attacks or stealing valuable data to extort payment from their victims. Second, the sector is home to large volumes of high-value R&D which is economically and strategically valuable for less developed nation states, making energy a prime target for espionage and IP theft.
And third, because energy is regarded as critical infrastructure, it is increasingly being targeted in geopolitically motivated attacks. Incidents span all facets of Europe’s energy infrastructure, including underwater and overground gas pipelines and power cables, LNG processing terminals, electricity pylons and substations, offshore oil and gas fields, and solar and wind farms. The ability to sabotage or restrict energy supply is an incredibly powerful tool for states engaged in both physical and hybrid warfare, while pre-positioning in critical systems provides leverage during geopolitical disputes. The North Atlantic Treaty Alliance (NATO) has assessed that the energy sector is one of the biggest targets for cyberattacks, particularly in the context of hybrid warfare activities.[3] Energy infrastructure is an attractive target because disruptions ripple across industries, inflict economic pain, and pose significant societal impacts in affected countries. European supply and demand tread a delicate balance, particularly during winter months, meaning even small disruptions can lead to price spikes, shortages, and increased uncertainty for consumers.[4] The following section, Attacks in the Energy Sector, further examines these factors through the lens of real-world incidents.
