Modeled Battery-Control Cyberattack Could Destabilize the Texas Grid

A Centrii risk assessment found that a coordinated compromise of cloud-based battery-storage control platforms could destabilize the ERCOT grid by maliciously coordinating battery dispatch. The model estimates that control of roughly 1,500 one-megawatt units—about 5.4% of Texas’s battery fleet—could disrupt frequency response, potentially interrupting service for up to 30 million people and causing as much as $65 billion in economic damage. Centralized optimizer and manufacturer cloud services, rather than individual batteries, are identified as the critical control-plane targets.

Malicious battery commands could resemble legitimate frequency-response activity or a poorly tuned controller, complicating detection and attribution during an incident. Centrii estimated a 92% probability of a notable battery-infrastructure cyberattack by 2031 under industry-average security practices; upgrading the fleet to IEC 62443 Security Level 2 could reduce the modeled attack’s effectiveness at an estimated $800 million to $2.8 billion. The findings are simulation-based risk estimates, not evidence that a battery-grid cyberattack has occurred.