Lyce · Hybrid Watch

hw_b6fd58204d9adcfe

Satellite outage knocks out thousands of Enercon wind turbines in Germany.

View this signal on the map

On 28 February 2022, Enercon—a major German wind-turbine manufacturer—reported a “massive disruption” to satellite communications impacting about 5,800 of its wind turbines across central Europe. The company stated that remote monitoring and control of those turbines (with a combined installed capacity of ~11 GW) were knocked out, though the turbines continued to operate in auto-mode. The outage coincided almost exactly with the start of Russia’s large-scale invasion of Ukraine, and Enercon noted there was “no further information on who or what may have caused the disruption”. The German cybersecurity agency (BSI) confirmed it was aware of a satellite-communications operator malfunction that restricted turbine maintenance, though it did not at the time attribute the incident publicly to any actor. Geographically, the incident underscores that Germany’s energy-industrial infrastructure—deep inland, away from front-line warzones—is a target vector in hybrid-warfare. The dynamics illustrate how hybrid-warfare actors may use disruption of networks (satellite comms) supporting key industrial systems to impose cost, degrade resilience and send a message without firing a missile. For Germany, the incident highlights exposure of renewable-energy systems, satellite links and industrial control systems to strategic attacks. The fact that the outage was concurrent with major geopolitical conflict raises questions about linkage to the state-sponsored actor toolkit.

Occurrence
Publication
First observed
Review status
Not assessed
Countries
Germany
Updated

Attribution

Pattern-compatible

Facts

No facts

Sources

  1. Role
    Discovery lead
    Publication

    On 28 February 2022, Enercon—a major German wind-turbine manufacturer—reported a “massive disruption” to satellite communications impacting about 5,800 of its wind turbines across central Europe. The company stated that remote monitoring and control of those turbines (with a combined installed capacity of ~11 GW) were knocked out, though the turbines continued to operate in auto-mode. The outage coincided almost exactly with the start of Russia’s large-scale invasion of Ukraine, and Enercon noted there was “no further information on who or what may have caused the disruption”. The German cybersecurity agency (BSI) confirmed it was aware of a satellite-communications operator malfunction that restricted turbine maintenance, though it did not at the time attribute the incident publicly to any actor. Geographically, the incident underscores that Germany’s energy-industrial infrastructure—deep inland, away from front-line warzones—is a target vector in hybrid-warfare. The dynamics illustrate how hybrid-warfare actors may use disruption of networks (satellite comms) supporting key industrial systems to impose cost, degrade resilience and send a message without firing a missile. For Germany, the incident highlights exposure of renewable-energy systems, satellite links and industrial control systems to strategic attacks. The fact that the outage was concurrent with major geopolitical conflict raises questions about linkage to the state-sponsored actor toolkit.