Coordinated ranged attack on Metcalf transmission substation near San Jose

In April 2013, the Metcalf transmission substation near San Jose, California, operated by Pacific Gas and Electric, was attacked by one or more people firing rifles at the site from outside the perimeter fence. Public reporting stated that around 17 transformers were struck, causing oil leaks and overheating, and that the damaged units were taken out of service. Grid operators rerouted supply and no injuries or widespread customer outage were reported. The incident was investigated by federal law enforcement and was followed by federal regulatory action requiring a mandatory physical security standard for critical bulk electric system facilities. It is widely cited as a case study of deliberate physical attack risk to transmission assets.

Public reporting and the subsequent regulatory record indicate that the substation equipment behaved as designed once damaged, with leaking transformers taken offline, and that the significance of the event lay in the security assumptions it exposed. Factors reported were: (1) the perimeter was designed principally against trespass and theft rather than sustained attack from outside the fence line; (2) the site was reachable from public roads and had nearby natural cover; (3) detection systems were not intended to identify or locate an attack originating outside the perimeter; (4) communications cables in the vicinity were reported to have been cut shortly before the attack on the transformers, suggesting prior planning; (5) reported response times indicated that intervention during an attack of this duration would have been unlikely even with faster detection.

1. Include attack from outside the fence line in physical security threat assessments for critical transmission assets, not only trespass and theft scenarios.
2. Identify which substations are critical to system stability and apply a documented threat and vulnerability assessment and physical security plan to them, as required by the North American standard developed after this event and as good practice elsewhere.
3. Review sightlines, approach routes and natural cover around critical sites, and consider screening, barriers or vegetation management where standoff exposure is high.
4. Consider fire and blast barriers between transformer bays, since physical separation that limits damage propagation is of value against deliberate damage as well as accidental fire.
5. Protect and duplicate site communications routes, including buried cable vaults and access chambers, so that loss of communications does not disable detection and response.
6. Test detection and alarm systems against scenarios that begin outside the perimeter, and agree with local emergency responders what response is realistically achievable within the likely duration of an attack.
7. Hold spare transformer capacity or mutual aid arrangements so that the loss of several units at one site does not extend restoration times.
8. Repeat these assessments periodically, since later substation shooting incidents in the same country, including one in 2022 that caused a widespread outage, indicate the threat has not diminished.

powermag.com/transformer-safety-fire-barriers-as-essential-protection...