Theft, arson and site security
88 lessons from 67 energy incidents, newest first, grouped by technology. Each is taken from the entry it links to, which has what happened and the sources.
Battery storage 1
Grid scale lithium ion battery fires can produce weeks of flare ups, so operators must plan for extended site security and monitoring after the initial event.
Solar PV 5
Maintain rapid coordination with local security forces for incident response.
Perimeter fencing at solar sites must be checked often for cuts, as three holes showed recurring theft that led to live wire exposure.
Sites in regions with documented hostility to renewables need perimeter barriers and remote monitoring beyond standard fencing.
Dried vegetation next to perimeter fencing can fuel rapid fire spread in high winds, so operators should clear grass and shrubs before dry seasons.
Solar plants should treat deliberate damage as a security risk and keep access control and detection under review.
Wind (onshore) 6
Unauthorised entry into a wind turbine with energised equipment proved fatal, so operators should strengthen physical security at remote unmanned sites.
Three men broke into the turbine, so door locks and intrusion detection are needed to deter and record trespass at isolated assets.
After a blade failure on a turbine over 160 metres tall, site staff need plans for immediate area security and public safety checks.
Post-incident site security and power isolation support safe investigation.
Restrict access and deploy security after a turbine fire until the site is made safe.
Video of a burning wind turbine can spread quickly, so owners should plan for public statements and site security after any visible fire.
Grid infrastructure 76
Establishing security cordons protects the public during grid asset incidents.
Where theft is violent, utility security needs a pre-agreed police response rather than being left to manage the scene alone.
Secure substations against metal theft to prevent damage and outages.
Where security conditions force contractors to leave a power station, operators need a plan for the capacity that then stays unavailable.
Treat an unexplained substation fire as both a safety event and a security event until investigators rule out third-party action.
Missing security doors at substations allow unauthorised access next to live cables, so operators must check and replace all enclosure doors after each complaint.
Underground cable tunnels at urban substations need stronger access controls because suspected theft and vandalism can start fires.
A second fire at the same substation within two weeks requires immediate root-cause review and extra security, not only repairs.
A substation next to an external fire can suffer extensive damage when combustible material is placed against it, so operators should enforce clearance zones around all perimeter fencing.
A substation that remains accessible to the public allows vandals to place burning items close to live equipment, so operators should review and upgrade fencing and surveillance at similar sites.
Lightning with strong winds and heavy rain can trigger transformer fire and explosion, so operators should verify surge protection and structural security on exposed units.
When arson is considered a possible cause of a substation fire, operators should check physical security measures.
A damaged transformer can detonate and produce flames, so operators should verify remote isolation and establish a security perimeter before staff approach.
A substation fire can spread via dielectric oil, so operators should check oil levels and seals at sites already flagged for theft.
Forced removal of on-duty personnel at a substation prevents safe restoration, so sites need security plans that protect control staff during unrest.
Perimeter checks at grid sites can deter unauthorised access, so fence integrity must be verified regularly.
Transformer substations need monitored perimeter fencing, as a cut fence was found at a similar site in Wesel.
Reinforce perimeter security and intrusion detection at substations.
Review copper theft prevention measures across grid sites.
Third-party damage at a substation kiosk can cause fire and outage, so operators should check perimeter security and external impact monitoring.
Copper cable theft at substations can start fires that cut supply to large areas, so operators should fit secure cable enclosures and intrusion detection.
Unauthorised entry into a live substation can cause severe burns, so operators should check perimeter fencing and barbed wire for gaps at legacy sites.
Possible metal theft at substations requires intrusion alarms or monitoring, especially at older facilities.
Cable theft at a substation can damage cabling and switchgear and start a fire, so operators should add physical barriers and monitoring around exposed cables.
Damage to transformers and switchgear from theft can leave parts of the site out of service for days, so plans must cover staged testing and safe restoration.
A transformer fire at an industrial site can cut power and lead nearby facilities to flare, so operators should plan for effects beyond the site fence.
Suspected cable theft should stay marked as unconfirmed until investigators finish their work, and the scene should be preserved.
Physical security measures at substations should be reviewed to deter cable theft attempts.
Rapid damage assessment and material sourcing procedures can reduce restoration times after vandalism incidents.
Theft and vandalism can leave part of a network offline after the main supply returns, so cable and distributor security needs its own checks.
Substation sites should have intrusion detection and rapid response protocols to deter arson attempts.
Substations require robust physical security and monitoring of control cabling to deter vandalism and theft.
Strengthen physical security at substations to deter unauthorised entry and theft.
Consider design changes such as secured or alternative cabling to reduce theft risk.
Treat substations in known vandalism hotspots as sites that need layered security, not guards alone.
Work with police on scrap-metal markets, because stolen components can leave equipment unprotected or faulted.
Where frequent switching, vandalism or staff shortages are already reported, restoration plans should allow for longer outages.
Treat cable theft as a possible cause of substation explosions, and keep physical security under review where theft is already reported.
Operators should check that perimeter fencing, gates and signage around substations meet current security standards.
Regular checks of industrial substation sites can help identify and deter trespass.
Keep the cause of a substation explosion unconfirmed until investigation separates equipment failure, vandalism and other factors.
Substation perimeters require robust physical security to deter unauthorised access.
Substation operators should keep physical security under review where assets have been targeted.
A fire that stays inside the substation fence can still cut supply to thousands of customers and close nearby streets.
Access controls at live substations must stop unauthorised entry so copper theft cannot bring people into contact with energised equipment.
Metal theft at substations creates an ignition and explosion risk, so operators must plan responses for blast events.
Include the risk of external fires spreading into compounds in substation security and fire risk assessments, especially in built-up areas.
Give the public an easy way to report hazards around substations, such as dumped rubbish or damaged fencing.
Removal of earthing conductors leaves substation equipment unsafe, so perimeter intrusion detection and alarms on earthing continuity help operators respond before thieves reach live plant.
Holding spare regulators and other critical distribution equipment allowed this substation to be restored the same day, and spares policies should reflect theft risk.
Reports of suspicious people near substations or neighbouring utility sites should prompt a check of fences and gates, as cut locks on an adjacent site were found here only after the fire.
Substations in theft-prone areas need stronger cable protection, as theft attempts can ignite fires that spread quickly.
Attempted theft of cable at a live substation can cause an explosion and loss of supply.
Operators and police should record theft attempts so that repeat targets can be identified.
Substations in residential areas should have secure fencing and locks and, where the risk is high, intruder detection or CCTV to deter deliberate fire setting.
Operators should record and share arson and vandalism attempts, so patterns across sites can be found.
Substations in public car parks or other areas with known anti-social behaviour need stronger physical security, lighting and monitoring.
Substation explosions can send a fireball and smoke plume beyond the site even when contained inside fencing, so operators should review public notification plans.
Fire contained within substation fencing still requires immediate investigation to prevent repeat electrical failures at similar sites.
Arson at an unmanned substation caused long outages, so insurers should check perimeter security and bin storage rules.
The newest 60 of 76 shown. The rest are on each grid infrastructure entry.
Behind these lessons. Of the 67 incidents these lessons come from, the paid record names the root cause for 61 and the part that failed for 45, with the companies involved and every source. See what a subscription opens or read a complete record.