Senior decision-makers come together to connect around strategies and business trends affecting utilities.


"It's a surprise we haven't seen more attacks on public utilities..."

image credit: Photo 73352504 © Brphoto |
Nevelyn Black's picture
Writer, Independent

Nevelyn Black is an independent writer with a background in broadcast and a keen interest in renewable energy.  In the last few years, she transitioned from celebrity interviews and film shoots...

  • Member since 2017
  • 878 items added with 508,283 views
  • Dec 28, 2021

From smart thermostats to fitness trackers, companies are gathering a great deal of data.  Utilities leverage their data to serve customers and forecast grid operations.  Data allows companies to understand different demographics, anticipate trends, improve efficiency and reduce waste.  Data can be a powerful tool for companies but collecting it comes with its own set of challenges.  “Good data quality is a process and to achieve it, utilities and industry need to take advantage of best practices.  They should consider data as one of their primary assets,” explained David Kirkland, Solution & Innovation Director, Oracle Utilities EMEA.

If data becomes a primary asset for utilities, they need to protect it from attack.  “We have these companies that are amassing just gigantic amounts of data about each and every one of us, all day, every day,” said Kate Ruane, senior legislative counsel for the First Amendment and consumer privacy at the American Civil Liberties Union. However, as companies become more data-centric, the risk of data breaches increase.  T-Mobile recently suffered a data breach that affected at least 40 million people. Utilities are not immune to these threats.  In fact, Saryu Nayyar, CEO at cybersecurity firm Gurucul stated, "It's a bit of a surprise that we haven't seen more attacks on public utilities, but there is no question that more are coming.”  Earlier this year, Colorado's Delta-Montrose Electric Association (DMEA) was the target of a cyberattack that took down 90% of its internal systems and caused 25 years of historical data to be lost.  The power grid and fiber network were not targeted but the utility is still rebuilding its systems. In general, Gary Ang, director at Singaporean utility SP Group, said utility companies are struggling with data protection and security.  He continued, “It is hard to move to data-centric operations.”  Utilities are also giving more consideration to what information they share and with whom.  This month, utility giants have agreed to stop selling sensitive information to Immigration and Customs Enforcement (ICE).  On a consumer level, the United States currently doesn’t have a singular data privacy law.  Only three states have spelled out comprehensive consumer privacy laws; California, Colorado and Virginia.  Some are vying for federal data protection regulations to be enforced across the country. “We need a federal law that thinks about things in a much more consistent approach to make sure that consumers understand and have the right expectation over rights that they have in their data,” said Whitney Merrill, a privacy attorney and data protection officer.

Cyberattacks have made data privacy and security a priority.  We can expect to see government agencies and utility companies expediting privacy and data management.  Every time data is collected and then sold or shared with a third party, the risk of a breach increases. How will your utility protect company and consumer data from attack?  Should we expect to see more federal regulations on how data is managed?

Matt Chester's picture
Matt Chester on Dec 28, 2021

Hopefully it's not too late and this isn't a situation where we're waiting for a major attack to 'wake up' the rest of the industry that prevention is necessary. Let's not let it get to that point

Christopher Neely's picture
Christopher Neely on Dec 30, 2021

I'm surprised to hear that big utility companies were sending customer data to ICE, which feels like a massive breach of trust and government overreach. Disturbing. While cybersecurity is a major need in the industry, data transparency is a necessity as well. 

Nevelyn Black's picture
Thank Nevelyn for the Post!
Energy Central contributors share their experience and insights for the benefit of other Members (like you). Please show them your appreciation by leaving a comment, 'liking' this post, or following this Member.
More posts from this member

Get Published - Build a Following

The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.

If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.

                 Learn more about posting on Energy Central »