Hackers could already be inside American utilities, cyber experts warn of ‘Trojan Horse’ threat
Cybersecurity experts warn that hackers may already have access to parts of US critical infrastructure, including utilities, and could exploit that access later. They say a recent attack on supermarket refrigeration in France shows how digital intrusions can disrupt essential services and cause substantial economic and social harm.
John Walsh of IGEL says many operational technology systems are 15 to 20 years old, costly to replace and difficult to take offline for upgrades. He argues operators should plan for attackers to be present and focus on limiting damage and restoring services; policy experts also raise concerns about everyday appliances connected to the internet.
- Experts warn hackers may already have footholds in US utilities.
- Older infrastructure can be difficult to update safely.
- Resilience means limiting damage and restoring essential services.
Both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Because utilities underpin essential services, experts argue that operators should assume intruders may already be inside and prepare to contain attacks and restore service quickly. Ageing operational systems can be costly and difficult to take offline, so resilience planning and careful limits on connected devices may reduce the risk of serious disruption.
The case against
A warning about possible access does not establish that hackers are inside utilities or that a major disruption is imminent, so policy should be guided by evidence about specific vulnerabilities and risks. Replacing or upgrading long-lived systems can be expensive and itself disrupt services; proportionate security measures may be preferable to broad restrictions or costly changes driven by worst-case scenarios.