A white pickup truck with a rack of roof lights blazing pulled up to an electrical substation in the small town of Morton, Washington, about 70 miles south of Seattle on June 16. In the predawn dark next to the city cemetery, a man in a dark hoodie and baseball cap hopped out of the truck. He broke a steel gate apart, likely with a crowbar later found at the scene, and walked inside the fenced facility on his way to sabotaging its high-voltage transformers.
Electrical substations transform high-voltage electricity to the lower voltages that keep America鈥檚 lights on, its food cold, its medical devices operating and its phones charged. Far-flung substations can be difficult to secure. Damaging even a single one can shut off critical services to thousands of people.
Attacks like the one in Morton are on the rise in the Northwest 鈥� there have been 15 since June, more than in the previous six years combined. The recent attacks make this region a hotspot for such activity, according to a joint investigation by Oregon Public Broadcasting and KUOW. In most cases, the motives aren鈥檛 known. But as the FBI and extremism researchers have noted, neo-Nazis have been calling for just such attacks.
鈥淭he individuals of concern believe that an attack on electrical infrastructure will contribute to their ideological goal of causing societal collapse and a subsequent race war in the United States,鈥� according to an FBI memo obtained by OPB and KUOW.
The substation in Morton that was attacked in June is connected to transmission lines that deliver hydropower from the Cowlitz Falls Dam. The energy coursing through those lines is more than 500 times the voltage that comes out of your light sockets or power outlets and, experts say, is easily lethal to anyone foolish enough to mess around with it.
Despite the danger, the Morton substation intruder entered the facility and deliberately damaged equipment. (To avoid inspiring copycat crimes, OPB and KUOW are omitting details of techniques used in this attack and others.)
鈥淚 saw a white flash through the garage door window,鈥� one eyewitness across the street told Morton Police. 鈥淭he power cut off.鈥�
The 4 a.m. incident plunged about 7,500 customers, or most of the eastern half of rural Lewis County, into darkness for several hours, according to police.
A Lewis County Public Utilities District surveillance video shows a Morton, Washington, substation going dark during a break-in about 4 a.m. on June 16, 2022.
The intruder climbed back into the passenger seat of the truck, which sped off to the north, according to another eyewitness.
The incursion kicked off a rash of attacks on the Northwest power grid in 2022, according to public records obtained by OPB and KUOW. It is unclear whether most of the attacks are connected.
As with most of them, no one has been arrested, and no one has claimed responsibility.
A rash of attacks
Pacific Northwest utilities have reported a surge of attacks to the FBI in recent months. Attacks on substations in Oregon and Washington predate a December attack in Moore County, North Carolina, that left at least 40,000 people without power for days.
In some cases, the attacks appear to follow manuals disseminated online by neo-Nazis and other far-right extremists.
For years, law enforcement and academics have warned about plots on the nation鈥檚 electrical grid from 鈥渁ccelerationist鈥� groups that advocate, however implausibly, that taking down the grid will hasten the demise of the federal government and start a race war.
A Nov. 22 alert from FBI headquarters and the agency鈥檚 Newark field office warned of an increase of 鈥渢hreats to electrical infrastructure鈥� from racially or ethnically motivated violent extremists (鈥淩MVE鈥�). Those would include white supremacists and other so-called accelerationists attempting to sow chaos.
鈥淭he FBI has received reports of threats to electrical infrastructure by threat actors who espouse RMVE ideology to create civil disorder and inspire further violence,鈥� the FBI warning noted.
Weeks later, a second bulletin sent by the FBI鈥檚 Portland field office reported specific attacks were carried out in Oregon and Washington. The attacks were carried out using firearms, hand tools, flames and chains 鈥減ossibly in response to an online call for attacks on critical infrastructure,鈥� according to the bulletin dated Dec. 2.
鈥淚n recent attacks, criminal actors bypassed security fences by cutting the fence links, lighting nearby fires, [and] shooting equipment from a distance,鈥� the bulletin stated. 鈥淣o theft was reported in either case, making it apparent that the intent was likely to disable electrical systems and not for monetary profit.鈥�
A spokesperson for the FBI declined to comment on the bulletins obtained by OPB and KUOW but said people should report suspicious activity near substations to law enforcement.
Neo-Nazis plot to take down the grid
Plots by white supremacists to target electrical infrastructure in the United States have increased dramatically since 2016, in September.
鈥淭he rise of accelerationist ideology and doctrine during the past decade likely fueled the increased risk of attack plots within white supremacist milieus targeting critical infrastructure, and the energy sector in particular,鈥� according to the report.
The U.S. Department of Justice has charged six individuals with a 鈥渄iscernible, tangible connection鈥� to neo-Nazi groups such as Atomwaffen Division and The Base with plots to destroy power lines, even a nuclear reactor, the report states.
Other white-supremacist plots have threatened electrical infrastructure in the Pacific Northwest.
In 2020 and 2021, federal prosecutors charged five neo-Nazis in connection with conspiracy to damage an energy facility. According to court documents filed by the government, one of the defendants carried a handwritten list of about a dozen locations in Idaho and surrounding states, each housing 鈥渁 transformer, substation, or other component of the power grid for the Northwest United States, that if destroyed could cause damage鈥� to the grid.
The goal, federal prosecutors stated, was 鈥渢o attack the power grid both for the purpose of creating general chaos and to provide cover and ease of escape in those areas in which they planned to undertake assassinations and other desired operations to further their goal of creating a white ethno-state.鈥�
Finally, in 2022, three white supremacists from Wisconsin, Ohio and Texas pleaded guilty to conspiring to provide material support to terrorists. According to the Justice Department, each defendant agreed to take down substations in a different area of the country using high-powered rifles. They believed it could bring about unrest, financial ruin and even a race war, according to prosecutors.
Even though the motives behind most of the 2022 attacks are unclear, the history of white supremacists鈥� focus on the electrical grid has troubled law enforcement and extremist researchers.
鈥淲e鈥檙e in a real wave of domestic extremist violence right now that鈥檚 been increasing for several years,鈥� said Mary McCord, a former acting attorney general for national security at the Department of Justice and is now a professor at Georgetown Law School.
In many cases it doesn鈥檛 matter to extremist groups who actually carries out the attacks, McCord said, because just the fact that the attacks are happening contributes to their goal of sowing discord.
鈥淧eople might not know whether a particular attack on a power station or a power grid was part of an ideologically motivated plot, or was just done for criminal purposes,鈥� McCord said. 鈥淲hite supremacists and others who are seeking to advance their own causes for ideological reasons can use that to advance their purported goals of causing chaos, undermining the government, undermining general stability.鈥�
Joshua Fisher-Birch, a researcher with the Counter Extremism Project, a nonprofit that tracks extremists groups鈥� online activities, said the attacks in North Carolina and those in the Northwest have energized some on the far right.
鈥淭he recent substation attacks have been spoken about in glowing terms by certain members of the extreme right, particularly by neo-Nazi accelerationists and white supremacist accelerationists who subscribe to this ideology where they want to push chaos,鈥� Fisher-Birch said.
Far-right forums online provide instruction manuals for how to attack substations and other critical infrastructure.
The design of the manuals invokes a video game and taps into costume-play subculture, according to Eric Ward, senior advisor at Western States Center, a Portland-based civil rights group that advocates against extremism.
鈥淲hite nationalists have tapped into gaming and 鈥榗os-play鈥� in order to convince individuals that what they鈥檙e engaging in is nothing more than play and gaming,鈥� Ward said. 鈥淚t downplays the real consequences.鈥�
The manuals plant dangerous ideas that can cause widespread harm and both those engaging in attacks and the websites allowing the manuals to proliferate should be held accountable, Ward said.
鈥淔or some people losing power isn鈥檛 just an inconvenience,鈥� Ward said. 鈥淚f you鈥檙e on a breathing machine, if you need to refrigerate your insulin, access to electricity is a matter of life and death.鈥�
Ward said by attacking the electrical grid, neo-Nazi groups want to show the 鈥渇ederal government is incapable of protecting itself and the American public.鈥� Their goal, he said, is to erode the public鈥檚 trust in government.
Despite an uptick in grid attacks by unknown actors, most accelerationist activity remains online, according to Ross Johnson, a grid-security consultant on Canada鈥檚 Vancouver Island.
鈥淲e have accelerationists in the United States, they鈥檙e in Canada, and they鈥檙e in Europe,鈥� he said. 鈥淲e don鈥檛 see them very often. A lot of it is just talk, thankfully.鈥�
鈥淚 think their logic is very twisted,鈥� Johnson said.
A national hotspot
Using utility sources, police reports, and a U.S. Department of Energy database of disturbances to the electrical grid, Oregon Public Broadcasting and KUOW confirmed a wave of 15 physical attacks on substations in the Pacific Northwest since June.
The incidents accelerated toward year鈥檚 end, with 10 of 15 attacks in 2022 taking place in November and December. (The tally for previous years includes incidents listed in the federal database as physical attacks, vandalism, suspicious activity, or sabotage. With local information sources, we confirmed that all 15 incidents in 2022 involved actual physical attacks on substations.)
The federal data also shows the West to be the hotspot for intentional damage to electrical infrastructure.
The western grid, serving 11 western states and the provinces of British Columbia and Alberta, has had more vandalism, sabotage, and physical attacks reported in the first eight months of 2022 than the rest of North America combined.
鈥淎ttacks on electric infrastructure are serious crimes and need to be treated as such,鈥� Puesh Kumar, head of the U.S. Department of Energy鈥檚 Office of Cybersecurity, Energy Security and Emergency Response, said in an email. 鈥淲e are asking the public鈥攊f you see something, say something鈥揳nd encouraging utilities across the country to share information with law enforcement regarding any suspicious activities.鈥�
Washington substations suffered a spate of attacks last summer and fall, starting in the southwestern part of the state. Three sites in the Grays Harbor area were targeted in June, August and October, according to local utility officials. A substation in the Washington town of Toledo, 71 miles north of Portland, was hit in August.
November brought a flurry of attacks: two in Woodland, Washington, then two more at Puget Sound Energy sites in Pierce and Thurston counties, which the utility has declined to identify more specifically.
Two substations in Clackamas County, just southeast of Portland, were attacked on Nov. 24 and Nov. 28.
Two intruders 鈥渃ut into the fence and used firearms to shoot up and disable numerous pieces of equipment and cause significant damage,鈥� according to an email from a Bonneville Power Administration security official to police departments in the area.
Petty vandalism and attempts to steal copper are nothing new for electric utilities.
鈥淏ut now we are dealing with quickly escalating incidents of sabotage,鈥� the security official wrote.
MAP: An OPB and KUOW investigation has documented 15 physical attacks on electrical substations in Oregon and Washington in 2022. Locations are approximate.
Several of the Northwest attacks incorporated a similar technique for knocking out power documented by police at the Morton substation in June.
At least two of the 15 attacks in the Northwest also involved firearms, though officials have divulged few details.
Christmas attacks
Federal prosecutors say the four most recent attacks, on Christmas day in Pierce County, Washington, were carried out by two men who demonstrated no ideological motive, only a desire to knock power out so they could commit burglaries at local businesses. According to federal charging documents for Matthew Greenwood and Jeremy Crahan of Puyallup, Washington, Greenwood confessed to the four attacks and told the FBI he and Crahan had gone to an unnamed local business during the blackout, drilled its door lock, and stolen from its cash register.
The Pierce County Sheriff鈥檚 Office reports several burglaries Christmas morning, with one business in the blackout area, the Thai Bangkok restaurant, having its door lock drilled and about $100 taken from its cash register.
鈥淭he recklessness and the lack of judgment that is displayed in order just to commit some burglaries by putting the power out in four separate locations, it鈥檚 just beyond words,鈥� federal judge J. Richard Creatura said at a detention hearing for Greenwood in January in Tacoma. Both defendants remain in custody.
Federal prosecutors said in court they found no evidence the men had motives beyond burglary, though they told the judge they had not yet searched the men鈥檚 phones for evidence of extremist ties.
鈥淒espite the arrests that occurred in Tacoma, we have not slowed down our efforts to further harden our substations and protect them in a physical manner,鈥� Bonneville Power Administration spokesperson Doug Johnson said. 鈥淭he arrests are encouraging, but we believe that the threat still exists.鈥�
Keeping the lights on
Protecting a vast network against intentional attack is, depending who you talk to, costly or impossible. Some 700,000 miles of transmission lines crisscross the continent, with more than 50,000 substations punctuating the grid in urban, suburban, and rural locations.
North America鈥檚 far-flung power grid is currently fragile enough that it doesn鈥檛 take a sophisticated plot to quickly knock out power to thousands of people. The Tacoma area鈥檚 Christmas day attackers, in their apparent quest to rob a Thai restaurant and other businesses, managed to quickly do $3 million in damage to two substations that will take three years to repair, according to federal prosecutors.
The attackers also managed, perhaps by sheer luck, not to kill themselves.
鈥淚t really is amazing to me that there hasn鈥檛 been a fatality for one of these vandals or thieves or whoever attempts to gain entry to a substation without the proper training,鈥� said Ian Cope with the Grays Harbor Public Utility District, the target of three substation attacks in 2022. 鈥淔or someone to seek entry to a substation and attempt to do damage is incredibly dangerous.鈥�
The rash of attacks since November has forced conversations about additional security.
鈥淲e are making more investments and hardening the measures that we take to secure our substations and power lines,鈥� said Johnson, with the Bonneville Power Administration. 鈥淭here will be further discussions across the board for electric utilities with regard to what we can do to protect electrical service and keep it reliable.鈥�
Proposed measures to protect the grid and keep America鈥檚 lights on range from coats of armor to artificial intelligence.
The Idaho National Laboratory has developed a bulletproof armor that can fit over transformers like a military-grade steel hood.
Others pitch higher-tech forms of surveillance as a more affordable form of security.
鈥淚t used to be that the cost of monitoring was really expensive because you had to get a signal or signals back to the monitoring center, and then you had to pay somebody to sit there and look at them,鈥� security consultant Ross Johnson said.
Now, in tandem with ever-cheaper video cameras, artificial-intelligence programs can scan many video streams at once for anything unusual 鈥� say, a human, ladder, or bolt cutter where it shouldn鈥檛 be 鈥� and alert humans to the potential problem.
鈥淚鈥檓 very optimistic about the future of substation security,鈥� Johnson said.
Utilities are required to have measures in place on their most critical assets to prevent cascading or uncontrolled power outages. Utility industry officials say the recent grid attacks in the Northwest and North Carolina hit smaller substations that were unlikely to lead to any cascading outages and were not required to have defensive measures in place.
Shortly after the North Carolina attack, the Federal Energy Regulatory Commission, which regulates the interstate transmission of electricity, launched a 4-month study aimed at determining whether physical security measures should be mandated at all power plants, substations, and control centers nationwide.
How much any additional security measures would boost the cost of powering America鈥檚 lights, appliances and vehicles remains unclear.
Copyright 2023 Oregon Public Broadcasting. To see more, visit .
