Cyber risks threaten energy infra as digitalisation expands

Vendor weaknesses and connected systems create new vulnerabilities.

Energy companies face rising cyber risks as digitalisation expands connected infrastructure and creates more potential entry points for attacks, according to GlobalData.

The intelligence firm said cyberattacks targeting critical national infrastructure can disrupt essential services, create financial losses, and affect national stability.

Its Strategic Intelligence report, “Cybersecurity in Energy,” identified digitalisation, distributed energy resources, grid modernisation, supply chains, third-party vendors, and geopolitics as key areas affecting energy security.

“Energy companies depend on extensive third-party ecosystems, making supplier vulnerabilities a major cyber risk that can spread into information technology (IT) and operational technology (OT) environments,” said Ravindra Puranik, Oil and Gas Analyst at GlobalData.

“Attacks exploiting shared vendor software (e.g., file-transfer tools) have hit major players,” he added.

Puranik said companies need stronger vendor governance measures, including continuous monitoring, standards, network segmentation, least-privilege access controls, audits, and joint incident response plans.

GlobalData said the convergence of IT and OT is connecting legacy assets with modern grid technologies, creating more entry points where IT breaches can affect operations.

The firm added that generative artificial intelligence is increasing the speed and sophistication of cyberattacks, creating additional pressure on companies’ response capabilities.

“Oil and gas firms should invest in specialised cybersecurity services that provide continuous monitoring and rapid response, expert validation, and strong operational readiness,” Puranik said.

He added that equipment and oilfield service providers should provide secure development support, security audits, and certification to reduce supply chain risks.

“Cybersecurity is integral across the oil and gas value chain, for securing data, safeguarding asset integrity, and preventing financial losses,” Puranik said.