<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
<title>IC Cyber – OT Incident Monitor</title>
<link>https://ic-cyber.ai/</link>
<atom:link href="https://ic-cyber.ai/feed.xml" rel="self" type="application/rss+xml"/>
<description>OT/ICS, IoT and critical-infrastructure incidents worldwide, summarised from public news reports by IC Cyber FlexCo.</description>
<language>en</language>
<lastBuildDate>Mon, 09 Nov 2026 19:20:09 GMT</lastBuildDate>
<ttl>30</ttl>
<item>
<title>Saudi East-West oil pipeline targeted in Medina region, sparking a limited fire with no operational impact.</title>
<link>https://ic-cyber.ai/#incident-452</link>
<guid isPermaLink="false">ic-cyber-incident-452</guid>
<pubDate>Mon, 09 Nov 2026 17:19:59 GMT</pubDate>
<category>Disruption</category>
<description>09 Nov 2026 · Saudi Arabia · Saudi East-West oil pipeline (Petroline)

On Monday, 9 November 2026, Saudi Arabia's East-West oil pipeline (Petroline) was targeted in the western Medina region, sparking a limited fire. A Saudi Energy Ministry official confirmed the incident in a statement carried by the state-run Saudi Press Agency. No injuries or fatalities were reported, and pipeline operations were not affected. Emergency response teams and specialized technical crews immediately began work following the incident, taking measures to secure the site. No further details were provided regarding the method of the attack or the responsible party. The incident occurred amid continued military escalation between the Saudi-led coalition supporting Yemen's internationally recognized government and the Houthi group, which has launched repeated missile and drone attacks toward Saudi territory. The East-West pipeline is a major oil transport artery running from the Eastern Province to the Red Sea coast, and its integrity is critical to Saudi Arabia's oil export capacity. The limited nature of the fire and the absence of operational disruption suggest the attack did not cause significant structural damage to the pipeline infrastructure.

Source: Anadolu Ajansı – https://aa.com.tr/en/middle-east/east-west-oil-pipeline-targeted-in-saudi-arabia-s-medina-region-sparking-fire-ministry-official/4117773</description>
</item>
<item>
<title>Power outage in South Tyrol affected ~106,000 customers after a fault at the Reschenbrücke substation during internal grid work.</title>
<link>https://ic-cyber.ai/#incident-450</link>
<guid isPermaLink="false">ic-cyber-incident-450</guid>
<pubDate>Mon, 09 Nov 2026 14:49:57 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 15:15 · Italy · Edyna, ~106,000 customers in South Tyrol

On Monday afternoon, 9 November 2026, a large-scale power outage struck multiple areas of South Tyrol, Italy, including several districts of Bolzano, Meran, and other municipalities. The outage was caused by a fault in a high-voltage installation at the Reschenbrücke substation, which occurred during internal work on the grid. Protection systems automatically reacted and interrupted the power supply for approximately five minutes. Around 106,000 customers were affected according to grid operator Edyna. The disruption caused traffic problems as multiple traffic light systems went offline, and the fire brigade had to respond to several incidents, including people trapped in elevators. An alarm was triggered at the Palais Widmann, the seat of the regional government, prompting occupants to evacuate the building. At the Bolzano hospital, a battery overheated in the basement, producing smoke, which the fire brigade quickly brought under control. Although widespread hacker attacks had raised public fears that the outage might be cyber-related, Edyna explicitly ruled out any connection to a cyberattack. Power was restored within minutes of the initial disruption.

Source: Südtirol News – https://www.suedtirolnews.it/chronik/stromausfall-legt-teile-bozens-lahm</description>
</item>
<item>
<title>Power outage in southwestern Saitama Prefecture, Japan, affecting approximately 900 households across six areas.</title>
<link>https://ic-cyber.ai/#incident-449</link>
<guid isPermaLink="false">ic-cyber-incident-449</guid>
<pubDate>Mon, 09 Nov 2026 13:50:19 GMT</pubDate>
<category>Blackout</category>
<description>09 Nov 2026 · Japan · Tokyo Electric Power Company Grid (TEPCO Power Grid)

On November 9, 2026, a power outage occurred in the southwestern part of Saitama Prefecture, Japan, affecting approximately 900 households across six areas. According to Tokyo Electric Power Company Grid (TEPCO Power Grid), the outage was confirmed as of 9:44 PM local time. The article does not specify the cause of the outage, whether it was due to a technical failure, weather, equipment malfunction, or other factors. No information about the duration or resolution of the outage is provided. The incident appears to be a localized grid disruption rather than a widespread regional blackout. No cyberattack or sabotage has been indicated in the report.

Source: 埼玉新聞 – https://www.saitama-np.co.jp/articles/222401</description>
</item>
<item>
<title>Short-term power grid disturbance in Kollersried, Hemau, affecting a one-kilometre radius from 07:19 to 15:25 on 9 November 2026.</title>
<link>https://ic-cyber.ai/#incident-448</link>
<guid isPermaLink="false">ic-cyber-incident-448</guid>
<pubDate>Mon, 09 Nov 2026 13:50:12 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 07:19 · Germany · Bayernwerk Netz GmbH

A short-term power grid disturbance (Kurzzeitige Netzstörung) affected the area around Hammermühlweg in the district of Kollersried, Hemau, in the Landkreis Regensburg, Bavaria, Germany. The fault began at 07:19 on 9 November 2026 and was expected to be resolved by 15:25 the same day. The responsible grid operator, Bayernwerk Netz GmbH, recorded the disturbance and dispatched technicians to the site for repair. The affected area was approximately a one-kilometre radius around the named location. The article, auto-generated from the operator's disturbance reporting portal, noted that such short-term grid disturbances are not uncommon in Germany, where households typically experience only a few minutes of power loss per year. The piece also provided guidance to residents on how to report power outages to the correct operator and advised that a power interruption is not always an emergency requiring police or fire brigade contact. No specific cause for the disturbance was identified in the article, and no cyberattack, sabotage, or weather event was indicated. The incident appears to have been a routine technical fault in the local distribution network, resolved within the same day.

Source: News.de – https://www.news.de/lokales/856649934/stromausfall-hemau-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>Two electrical transformers burst in Mahshahr, causing a partial power outage in the industrial zone.</title>
<link>https://ic-cyber.ai/#incident-447</link>
<guid isPermaLink="false">ic-cyber-incident-447</guid>
<pubDate>Mon, 09 Nov 2026 13:20:17 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026 · Iran · Mahshahr industrial zone

Following US military strikes on southern Iran, a projectile impact was reported on Qeshm Island in Hormozgan Province, the only confirmed strike location in the province. Explosions were heard in maritime areas near Qeshm and Bandar Abbas, which Iranian authorities attributed to security measures to maintain control over the Strait of Hormuz rather than direct attacks on those cities. Separately, in the port city of Mahshahr in Khuzestan Province, residents reported explosion-like sounds that initially sparked speculation about a possible attack. The sounds coincided with a power outage affecting part of the Mahshahr industrial zone. Khuzestan Deputy Governor Valiollah Hayati clarified that the sounds were caused by the bursting of two electrical transformers, not an attack. The power disruption affected industrial operations in the Mahshahr area. The incident occurred amid heightened security tensions in southern Iran following the US military action. No further details about the extent of the power outage or its impact on specific industrial facilities were immediately available at the time of reporting.

Source: WANA News Agency – https://wanaen.com/qeshm-strike-explosions-near-bandar-abbas-power-outage-in-mahshahr/</description>
</item>
<item>
<title>KEPCO underground cable damaged during demolition, causing a 70-minute power outage for 200 households in Sokcho.</title>
<link>https://ic-cyber.ai/#incident-443</link>
<guid isPermaLink="false">ic-cyber-incident-443</guid>
<pubDate>Mon, 09 Nov 2026 11:50:07 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 13:00 · South Korea · KEPCO (Korea Electric Power Corporation)

On 9 November 2026, a power cable belonging to Korea Electric Power Corporation (KEPCO) was accidentally damaged during building demolition work in the Seorak-dong area of Sokcho, Gangwon Province, South Korea. The incident caused a temporary power outage affecting approximately 200 households and nearby facilities, beginning around 1:00 p.m. local time. KEPCO's Gangwon Headquarters confirmed the outage and restored electricity approximately 70 minutes later, at around 2:10 p.m. No casualties or additional damage were reported. The damaged cable was part of an underground line buried in the ground rather than a utility-pole line. KEPCO believes a demolition worker mistakenly identified the KEPCO cable as building-related wiring and damaged it during the work. Because no utility poles were present in the section where the underground line ran, it was reportedly difficult to visually distinguish the ownership of the wires at the site. KEPCO is investigating the circumstances of the incident, including the work process and how the cable was damaged. The event highlights the importance of checking the location and path of buried utilities before excavation or demolition work, as underground power cables are difficult to identify from the surface.

Source: 재경일보 – https://news.jkn.co.kr/editions/english/post/1081100</description>
</item>
<item>
<title>Power outage in Kandern, Germany since Monday morning; medium-voltage grid affected, cause unknown, repair in progress.</title>
<link>https://ic-cyber.ai/#incident-441</link>
<guid isPermaLink="false">ic-cyber-incident-441</guid>
<pubDate>Mon, 09 Nov 2026 10:49:52 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 08:00 · Germany · Naturenergie Netze

Since Monday morning around 8:00, parts of the town of Kandern in Baden-Württemberg, Germany, have been without electricity. The medium-voltage distribution grid (Mittelspannungsnetz) is affected, and the cause of the outage remains unknown as of the time of reporting. The grid operator Naturenergie Netze has deployed technicians both on-site and at its joint control center (Verbundleitstelle) to restore power to affected customers as quickly as possible. Fault-finding and repair measures have been initiated, with a cable measurement vehicle (Kabelmesswagen) deployed to locate the exact point of failure. In some areas, temporary generators (Aggregate) have been set up to maintain power supply. The company stated that full restoration of the power supply is expected to take additional time. No information on the root cause of the disruption was available at the time of publication. The incident appears to be a technical failure of the medium-voltage grid infrastructure rather than a cyberattack or external sabotage, though the cause has not been officially determined.

Source: Schwarzwälder Bote – https://www.schwarzwaelder-bote.de/lokales/weil-am-rhein-rebland/stromausfall-in-kandern-teile-der-stadt-seit-montagmorgen-ohne-elektrizitaet-ursache-unklar-79680678.html</description>
</item>
<item>
<title>Planned power and water restrictions hit Kerch and Sevastopol in occupied Crimea due to grid repair work and overloads.</title>
<link>https://ic-cyber.ai/#incident-440</link>
<guid isPermaLink="false">ic-cyber-incident-440</guid>
<pubDate>Mon, 09 Nov 2026 10:49:48 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 10:00 · Ukraine · Tavriya Main Power Grid Company, Krymenergo

On November 9, 2026, electricity supply restrictions were imposed in Kerch and the Leninsky District of occupied Crimea, with power cuts scheduled from 10:00 a.m. to 5:00 p.m. The shutdown of water pumps meant water would be delivered to residents by tanker trucks. Russian authorities and the utility company Krymenergo attributed the outages to repair work carried out by the Tavriya Main Power Grid Company. Power restrictions were also in effect throughout the rest of Crimea, with backup power systems deployed for socially critical facilities. Temporary power restrictions were additionally introduced in Sevastopol, where Russian mayor Mikhail Razvozhayev cited the need to eliminate power grid overloads outside the city. Electricity was prioritized for hospitals, water treatment facilities, and other critical infrastructure. Residents of Kerch reported that schools also lacked heating. The article noted that a large-scale blackout had previously occurred in occupied Crimea on the night of October 24, which had caused public transit to halt, disrupted maritime traffic, and led to an almost complete shutdown of internet service. The November 9 restrictions appear to be a continuation of ongoing grid instability in the region.

Source: Інтент – https://intent.press/en/news/society/2026/kerch-is-without-electricity-water-and-heat/</description>
</item>
<item>
<title>A cyberattack is reported to threaten the construction of the Austria–Italy Brenner Base Tunnel.</title>
<link>https://ic-cyber.ai/#incident-438</link>
<guid isPermaLink="false">ic-cyber-incident-438</guid>
<pubDate>Mon, 09 Nov 2026 09:19:46 GMT</pubDate>
<category>Disruption</category>
<category>Cyber</category>
<description>09 Nov 2026 · Austria, Italy · Brenner Base Tunnel construction

According to the Odessa Journal, a cyberattack is threatening the construction of the Brenner Base Tunnel, a major infrastructure project connecting Austria and Italy. The headline indicates that the attack poses a risk to the ongoing construction work. No further details on the nature of the attack, specific systems targeted, or operational impact are available from the headline alone.

Source: Odessa Journal – https://odessa-journal.com/austriaitaly-brenner-tunnel-project-faces-cybersecurity-threat</description>
</item>
<item>
<title>France blamed Iran's IRGC for cyberattacks on 700 grocery refrigeration systems and hydroelectric facilities, causing fires.</title>
<link>https://ic-cyber.ai/#incident-428</link>
<guid isPermaLink="false">ic-cyber-incident-428</guid>
<pubDate>Sun, 08 Nov 2026 09:19:28 GMT</pubDate>
<category>OT cyberattack</category>
<category>Cyber</category>
<description>09 Nov 2026 · France · French grocery stores (approx. 700), butchers, slaughterhouse, cooperative food-processing plants, small hydroelectric facilities (Schneider Electric equipment)

French authorities on November 9, 2026, published a report attributing cyberattacks on refrigeration systems at approximately 700 French grocery stores to Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps. The attacks, which occurred in October 2026, caused extensive food losses and at least 15 fires. Victims included large retail chains, butchers, a slaughterhouse, and cooperative food-processing plants. ANSSI also identified simultaneous targeting of Schneider Electric equipment at several small hydroelectric facilities, though disruption there was described as moderate. The report was issued by France's Cyber Crisis Coordination Centre, combining ANSSI, military cyber command, and intelligence services DGSE and DGSI. Evidence linking the attacks to Shahid Kaveh included Farsi text artefacts, tooling, and reconnaissance infrastructure on other industrial equipment. The Paris Prosecutor's Office opened a judicial investigation and requested international arrest warrants for the unit's head and deputies. A second wave of similar attacks hit businesses in at least 11 European countries in early November, including British meat suppliers and three sites of France's national blood service. France summoned Iran's ambassador and announced it would pursue European sanctions. U.S. agencies had previously identified Shahid Kaveh as the CyberAv3ngers group linked to OT attacks on U.S. water utilities.

Source: The Record – https://therecord.media/france-blames-iran-for-fridge-cyberattacks</description>
</item>
<item>
<title>Fire at Mayfair substation in Johannesburg caused widespread power outages affecting hospitals, media, and residential areas.</title>
<link>https://ic-cyber.ai/#incident-439</link>
<guid isPermaLink="false">ic-cyber-incident-439</guid>
<pubDate>Mon, 09 Nov 2026 09:49:45 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · South Africa · City Power, SABC, Garden City Hospital

A fire at Johannesburg's Mayfair substation in the early hours of Sunday 8 November 2026 caused significant power outages across a large section of the city. The disruption affected both residential and business communities, including SABC headquarters in Auckland Park, Garden City Hospital, and neighbourhoods such as Mayfair, Crown, Vrededorp, Brixton, Crosby, Pageview, Homestead Park, and Amalgam. City Power, the municipal electricity utility, deployed engineers through Sunday night to restore supply but progress was hampered by heavy rainfall. Technicians cleaned carbon residue from fire-damaged equipment, checked the condition of seven cables, and tested the transformer and electrical panels before initiating repairs. City Power considered rerouting electricity through alternative paths but rejected the option, concluding it would overload remaining infrastructure and risk a secondary outage. Instead, the utility prioritised thorough investigation, testing, and step-by-step repairs. Restoration was expected to be gradual, with safety as the highest priority. City Power formally apologised to affected customers for the significant inconvenience caused to key customers, businesses, and households.

Source: Joburg ETC – https://www.joburgetc.com/news/mayfair-substation-fire-joburg-power-outage-restoration/</description>
</item>
<item>
<title>Cyberattack on supermarket refrigeration controllers in Belgium, Luxembourg, Sweden, and Ireland caused food losses worth millions of euros.</title>
<link>https://ic-cyber.ai/#incident-435</link>
<guid isPermaLink="false">ic-cyber-incident-435</guid>
<pubDate>Sun, 08 Nov 2026 23:49:44 GMT</pubDate>
<category>IoT breach</category>
<category>Cyber</category>
<description>08 Nov 2026 · Belgium, Luxembourg, Sweden, Ireland · Delhaize, Carrefour, ICA, Coop, SuperValu

A new wave of cyberattacks targeted refrigeration control systems in supermarkets across Belgium, Luxembourg, Sweden, and Ireland, causing food losses estimated at several million euros. In Belgium and Luxembourg, approximately 40 Delhaize stores reported a nighttime 'computer incident,' with one branch in Hoeilaart losing products worth 100,000 euros, not counting losses from keeping the store closed. Carrefour confirmed that only 15 of its Belgian stores were affected. In Sweden, ICA and Coop stores experienced disruptions to their cooling equipment; one ICA store reported freezers set to 50 degrees Celsius, and a location in Sjöbo confirmed its systems were hacked overnight. Coop stated that seven of its 800 stores were affected and that the situation was contained and under control. In Ireland, SuperValu reported 13 impacted stores. Security expert David Pereira explained that the attack targeted the controllers supervising and regulating refrigeration systems, which had web panels exposed to the internet, default passwords, and outdated unpatched firmware. The incident occurred almost three weeks after a similar attack on hundreds of French supermarkets. No connection between the two waves has been confirmed, and the attacker remains unidentified.

Source: G5noticias – https://g5noticias.cl/2026/11/08/ciberataque-contra-sistemas-de-refrigeracion-afecta-a-supermercados-europeos-expertos-explican-fenomeno-y-que-hacer-en-chile-para-prevenirlo/</description>
</item>
<item>
<title>Drone attack on Khor Mor gas field in Iraq's Kurdistan Region caused 70%+ power outage, cutting ~2,800 MW from grid.</title>
<link>https://ic-cyber.ai/#incident-434</link>
<guid isPermaLink="false">ic-cyber-incident-434</guid>
<pubDate>Sun, 08 Nov 2026 23:19:42 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · Iraq · Khor Mor gas field (Dana Gas, Crescent Petroleum, Pearl Petroleum), KRG Power Department, power plants in Erbil, Sulaimaniyah, Bazian, Chamchamal, Duhok

On the evening of November 8, 2026, a drone carrying explosives struck the Khor Mor natural gas storage facility in the Chamchamal district of Sulaimaniyah province, Iraq's Kurdistan Region. The attack caused a fire and immediately halted gas production at the region's largest gas field, operated by Dana Gas and Crescent Petroleum through the Pearl Petroleum consortium. The disruption cut off natural gas supply to power plants in Erbil, Sulaimaniyah, Bazian, Chamchamal, and Duhok, forcing approximately 2,500 to 2,800 megawatts of generation capacity off the grid. According to the KRG Power Department, over 70% of the Kurdistan Region experienced power outages as a result. Officials stated they were dispatching hydroelectric plants at Dokan and Darbandikhan, along with other fuel plants, to prevent a total blackout and prioritize hospitals and water treatment facilities. Iraqi Prime Minister Ali al-Zaidi announced no casualties in the initial assessment and ordered a joint investigation committee with KRG authorities. No group has claimed responsibility. The Khor Mor gas field has been targeted multiple times in recent years, including attacks in January 2024, April 2024 (which killed four foreign workers), February 2025, and November 2025. The attack occurred amid ongoing US-Iran tensions and during security talks between KRG and Iranian representatives.

Source: 蕃新聞 – https://n.yam.com/Article/20261109957136</description>
</item>
<item>
<title>Blackout in Cumaná, Venezuela caused by a serious failure in a Corpoelec substation.</title>
<link>https://ic-cyber.ai/#incident-433</link>
<guid isPermaLink="false">ic-cyber-incident-433</guid>
<pubDate>Sun, 08 Nov 2026 22:49:42 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · Venezuela · Corpoelec

Residents of Cumaná, Venezuela blocked roads in response to a blackout caused by a serious failure in a Corpoelec substation. The incident disrupted power supply in the area, prompting community protests. No further details on the root cause, duration, or official response are available from the headline alone.

Source: LaPatilla.com – https://lapatilla.com/2026/11/08/video-vecinos-de-cumana-trancaron-vias-ante-apagon-por-grave-falla-en-subestacion-de-corpoelec/</description>
</item>
<item>
<title>Last external power line to Zaporizhzhia nuclear plant disconnected, forcing reliance on diesel generators for several hours.</title>
<link>https://ic-cyber.ai/#incident-432</link>
<guid isPermaLink="false">ic-cyber-incident-432</guid>
<pubDate>Sun, 08 Nov 2026 20:49:39 GMT</pubDate>
<category>Outage</category>
<description>08 Nov 2026, 02:36 · Ukraine · Zaporizhzhia Nuclear Power Plant, Energoatom

At 2:36 am local time on November 8, 2026, the last working power line into the Zaporizhzhia nuclear plant in Russian-occupied southern Ukraine disconnected, according to Ukraine's state nuclear company Energoatom. The plant's six reactors have been in cold shutdown since April 2024 and generate no electricity, but they still require power for cooling systems to manage decay heat from spent fuel. An automatic attempt to reconnect the Ferosplavna-1 line failed, and the plant switched to on-site diesel generators, which supplied power until the line was restored later that day. The International Atomic Energy Agency (IAEA) stated it did not know where or why the line disconnected. This was the 27th time the plant had lost all outside power during the war. The plant's Russian-installed management reported radiation levels at the site and in the surrounding monitoring area were normal. The main Dniprovska power line remained unavailable as of an IAEA update on October 23, meaning the plant still lacked a second grid route. A previous outage in August-September 2026 lasted 18 days before an IAEA-brokered ceasefire allowed repairs. The incident highlighted the ongoing vulnerability of the plant's external power supply and the critical importance of maintaining cooling for shut-down reactors.

Source: Open Magazine – https://openthemagazine.com/world/explained-zaporizhzhia-blackout-why-a-shut-down-nuclear-plant-still-needs-electricity</description>
</item>
<item>
<title>Power outage in Leun-Stockhausen caused by a technical grid fault, resolved by on-site technicians.</title>
<link>https://ic-cyber.ai/#incident-429</link>
<guid isPermaLink="false">ic-cyber-incident-429</guid>
<pubDate>Sun, 08 Nov 2026 12:49:41 GMT</pubDate>
<category>Outage</category>
<description>08 Nov 2026, 10:27 · Germany · EAM Netz GmbH, residents of Leun/Stockhausen

On 8 November 2026, a power outage affected residents in the Stockhausen area of Leun (postal code 35638, Lahn-Dill-Kreis, Hesse, Germany). The disruption began at 10:27 local time and was expected to be resolved by 15:30. The grid operator EAM Netz GmbH dispatched technicians to the affected location on Stockhäuser Straße to repair the fault. The cause was a technical problem in the local distribution grid; no cyberattack or external sabotage was indicated. The article notes that Germany's power grid is generally highly reliable, with average unplanned outage durations (SAIDI) below 13 minutes in recent years according to the Federal Network Agency. The incident was a localized event affecting a small residential area and was treated as a routine grid maintenance matter rather than an emergency.

Source: News.de – https://www.news.de/lokales/856516707/stromausfall-leun-aktuell-eam-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>A small UK power plant was shut down for four days after a cyberattack attributed to Iranian-affiliated hackers.</title>
<link>https://ic-cyber.ai/#incident-427</link>
<guid isPermaLink="false">ic-cyber-incident-427</guid>
<pubDate>Sun, 08 Nov 2026 08:49:51 GMT</pubDate>
<category>OT cyberattack</category>
<category>Cyber</category>
<description>08 Nov 2026 · United Kingdom · unnamed small power plant

UK authorities reported a cyber incident in which a small power plant was forced to shut down for four days following an attack attributed to hackers affiliated with the Iranian regime. The incident did not affect the general electricity supply to the wider grid. The attack coincided with reported cyberattacks on water infrastructure in the United States. The event was disclosed in the context of a broader UK government preparedness campaign called "Be Ready," in which Prime Minister Andy Burnham urged citizens to stockpile supplies and equipment for at least three days without electricity, water, or telecommunications, citing risks from extreme weather phenomena and cyber threats. The UK also issued an emergency alert regarding the spread of vegetation fires across multiple regions, with over 1,000 fires reported since the start of the year, prompting military mobilisation and public warnings to reduce accidental ignition risks. No further technical details about the specific systems targeted at the power plant or the methods used by the attackers were provided in the report.

Source: Informat.ro – https://informat.ro/ja/international-ja/britain-prepares-the-public-for-massive-power-outages-147304-ja</description>
</item>
<item>
<title>Points failure between Oxford and Didcot Parkway blocked all rail lines, causing cancellations and delays.</title>
<link>https://ic-cyber.ai/#incident-426</link>
<guid isPermaLink="false">ic-cyber-incident-426</guid>
<pubDate>Sun, 08 Nov 2026 08:49:43 GMT</pubDate>
<category>Disruption</category>
<description>08 Nov 2026 · United Kingdom · Great Western Railway

On the morning of November 8, 2026, a points failure between Oxford and Didcot Parkway caused all rail lines from Oxford to London to be blocked. Great Western Railway announced that the technical fault involving the train track switching mechanism had brought services to a standstill. Multiple trains to London Paddington were cancelled, and disruption was expected to last until 10:30am. Trains to London Marylebone remained in operation, with travellers advised to double-check their services before travelling. The incident was a physical/technical failure of the points (track switches) rather than a cyberattack or sabotage. No specific cause for the points failure was identified beyond it being a technical fault. The disruption affected all lines through the affected section, making it a significant but short-lived rail outage.

Source: Oxford Mail – https://www.oxfordmail.co.uk/news/26709292.cancellations-lines-oxford-london-blocked/</description>
</item>
<item>
<title>Russian military attack on Ukrainian substations caused power outages affecting 850,000 people across multiple regions.</title>
<link>https://ic-cyber.ai/#incident-425</link>
<guid isPermaLink="false">ic-cyber-incident-425</guid>
<pubDate>Sun, 08 Nov 2026 07:49:35 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · Ukraine · DTEK, residents of Dnipropetrovsk and Zhytomyr regions

On Sunday, November 8, 2026, Russian military forces attacked two electrical substations in Ukraine's Dnipropetrovsk and Zhytomyr regions, as confirmed by the Russian Defense Ministry. The strikes also targeted three cargo ships, including two container vessels near Odesa and one dry cargo ship southwest of the port. Ukrainian President Zelensky accused Russia of launching a large-scale overnight drone attack. The Ukrainian energy company DTEK reported that over 600,000 residents in Pavlohrad, Samar, Kamianske, and Dnipro lost power supply. Additionally, approximately 250,000 people in the Kharkiv region experienced power outages. Zelensky stated that 140 apartment buildings in Zhytomyr region were left without heating. Authorities reported that power supply was partially restored after emergency repairs. Zelensky further noted that over the past week, Russia had launched 115 missiles, nearly 1,900 guided aerial bombs, and over 3,000 attack drones at Ukraine. The total number of people affected by the power outages reached approximately 850,000.

Source: 信報網站 – https://m.hkej.com/landing/mobarticle2/id/4560842/%E4%BF%84%E8%BB%8D%E7%A9%BA%E8%A5%B2%E8%AE%8A%E9%9B%BB%E7%AB%99%20%E7%83%8F%E5%85%8B%E8%98%AD%E6%96%A5%E8%87%B485%E8%90%AC%E4%BA%BA%E5%81%9C%E9%9B%BB</description>
</item>
<item>
<title>Power outage hit approximately 32,160 households in Azumino and Matsumoto cities, Nagano, operated by Chubu Electric Power.</title>
<link>https://ic-cyber.ai/#incident-424</link>
<guid isPermaLink="false">ic-cyber-incident-424</guid>
<pubDate>Sun, 08 Nov 2026 05:19:41 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · Japan · Chubu Electric Power

A power outage affected approximately 32,160 households in Azumino City and Matsumoto City in Nagano Prefecture, Japan. The outage was reported by Chubu Electric Power, the regional utility serving the area. The cause of the outage was not specified in the available headline. The incident was reported as breaking news on 8 November 2026.

Source: newsdigest.jp – https://newsdigest.jp/news/4b34e4b5-9a32-41db-b0d2-920f534b0596</description>
</item>
<item>
<title>A fault on Nigeria's Aba–Itu 132kV transmission line caused a power outage affecting Akwa Ibom State, restored after repairs.</title>
<link>https://ic-cyber.ai/#incident-445</link>
<guid isPermaLink="false">ic-cyber-incident-445</guid>
<pubDate>Mon, 09 Nov 2026 12:49:47 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026, 13:02 · Nigeria · Transmission Company of Nigeria (TCN), Port Harcourt Electricity Distribution Company (PHEDC)

On Saturday, November 7, 2026, at 1:02 p.m., a fault occurred on the Aba–Itu 132kV transmission line operated by the Transmission Company of Nigeria (TCN), causing an outage that disrupted electricity supply to parts of Akwa Ibom State. TCN's maintenance team patrolled the affected line and carried out corrective works. The line was successfully restored at 7:53 p.m. on Sunday, November 8, 2026. Following restoration, the Port Harcourt Electricity Distribution Company (PHEDC) resumed taking electricity for onward distribution to customers in Uyo, Eket, Ekim, and Itu. The outage lasted approximately 31 hours. TCN confirmed the restoration in a statement signed by its management on November 8, 2026, and reaffirmed its commitment to efficient bulk electricity transmission. The incident was caused by a physical fault on the transmission line rather than a cyberattack or external sabotage.

Source: TVC News – https://www.tvcnews.tv/tcn-restores-aba-itu-132kv-transmission-line-after-outage/</description>
</item>
<item>
<title>Three departure system failures at Incheon airport in one week disrupted passenger processing for 14 airlines.</title>
<link>https://ic-cyber.ai/#incident-444</link>
<guid isPermaLink="false">ic-cyber-incident-444</guid>
<pubDate>Mon, 09 Nov 2026 12:19:55 GMT</pubDate>
<category>Disruption</category>
<description>07 Nov 2026, 06:35 · South Korea · Incheon International Airport Corp., ARINC, Ministry of Justice (Korea), 14 airlines

Incheon International Airport experienced three departure-related system failures within a single week in late October and early November 2026. The most recent, on November 7, prevented normal verification of passenger transport data at security checkpoints in Terminals 1 and 2, affecting 14 airlines. Passengers received repeated 'transport information unconfirmed' alerts, forcing staff to manually cross-check documents. Emergency repairs were completed 52 minutes later, with no flight delays reported. The airport attributed the failure to a temporary delay in internal data processing. Earlier, on October 30, a failure in ARINC-managed network equipment caused communication instability at 44 airlines, with 11 Chinese carriers unable to access check-in systems for approximately five hours. On November 4, a failure in the Ministry of Justice's advance passenger information system left airlines without passenger data for about two hours, causing some flight delays. The airport operator stated it considered it unlikely that any of the three incidents were caused by hacking. Airlines are considering seeking damages from ARINC, which has pledged preventive measures and regular inspections. The airport committed to strengthening checks on departure-related systems in coordination with relevant agencies.

Source: 헤럴드경제 – https://mbiz.heraldcorp.com/article/10931214</description>
</item>
<item>
<title>Power outage affected up to 1,280 households in Chino, Fujimi, and Hara, Nagano, restored same day.</title>
<link>https://ic-cyber.ai/#incident-436</link>
<guid isPermaLink="false">ic-cyber-incident-436</guid>
<pubDate>Mon, 09 Nov 2026 01:19:48 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026, 07:45 · Japan · Chubu Electric Power Power Grid (Nagano Branch)

On November 7, 2026, at approximately 7:45 AM local time, a power outage occurred affecting parts of Chino City, Fujimi Town, and Hara Village in the Suwa District of Nagano Prefecture, Japan. At its peak, approximately 1,280 households lost electricity. The outage was gradually resolved, with all affected areas restored by approximately 1:40 PM the same day. Chubu Electric Power Power Grid's Nagano Branch confirmed the incident and stated it was investigating the cause of the outage. No specific cause was identified at the time of reporting, and no cyberattack or external interference was indicated. The incident was relatively localized, affecting a limited number of households in the mountainous area of Nagano Prefecture. The restoration took approximately six hours from the initial outage to full recovery. No injuries or further damage were reported. The article was published by Shinano Mainichi Shimbun Digital, a regional newspaper based in Nagano Prefecture, on the same day as the incident.

Source: 信濃毎日新聞デジタル – https://www.shinmai.co.jp/news/article/gf01dbnfhacq06p36vgqs15g</description>
</item>
<item>
<title>Transmission-line failure took a substation out of service, causing a power outage on Long Beach Peninsula, Washington.</title>
<link>https://ic-cyber.ai/#incident-431</link>
<guid isPermaLink="false">ic-cyber-incident-431</guid>
<pubDate>Sun, 08 Nov 2026 18:19:44 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026, 18:45 · United States · Pacific County PUD

A transmission-line failure took a substation out of service on Saturday, November 7, 2026, causing a power outage affecting customers in Klipsan Beach, Ocean Park, Surfside, and Oysterville on the Long Beach Peninsula in Pacific County, Washington. Pacific County PUD issued an outage notice at approximately 6:45 p.m., initially unable to estimate restoration time because the substation problem required a larger repair than a typical line call. Electricity was restored to most customers by about 7:45 p.m., though a smaller outage remained near 282nd Street at Q and R Streets in Ocean Park, with the PUD estimating about two additional hours for full restoration. The outage occurred during a high-wind warning for the coast, with forecasters expecting south winds of 20 to 30 mph and gusts up to 60 mph. However, the article explicitly notes that wind was a regional risk and not a confirmed cause of the transmission-line failure. Pacific County's 2022 Hazard Mitigation Plan identifies high winds as a general risk to PUD infrastructure, and the PUD's Wildfire Mitigation Plan describes annual vegetation management, but neither document establishes the specific cause of this incident. The utility advised affected residents on safety measures including generator use and checking on neighbors dependent on medical equipment.

Source: Hoodline – https://hoodline.com/2026/11/most-long-beach-peninsula-power-restored-after-saturday-substation-outage/</description>
</item>
<item>
<title>A landlord faces court over a physical attack on Ikeja Electric staff that caused a Lagos blackout.</title>
<link>https://ic-cyber.ai/#incident-430</link>
<guid isPermaLink="false">ic-cyber-incident-430</guid>
<pubDate>Sun, 08 Nov 2026 17:19:48 GMT</pubDate>
<category>Blackout</category>
<description>07 Nov 2026 · Nigeria · Ikeja Electric

A landlord has been taken to court in connection with a physical attack on staff of Ikeja Electric, a power distribution utility in Lagos, Nigeria. The attack is linked to a blackout affecting the city. The specific details of the attack, its exact date, and the extent of the power outage are not provided in the available headline. The case is now before a court, indicating the incident has progressed to a legal stage.

Source: P.M.EXPRESS – https://pmexpressng.com/lagos-blackout-landlord-in-court-over-attack-on-ikeja-electric-staff/</description>
</item>
<item>
<title>Russian drones damaged a heating plant and destroyed a substation in Ukraine's Shevchenkivshchyna region, causing power and heating outages.</title>
<link>https://ic-cyber.ai/#incident-422</link>
<guid isPermaLink="false">ic-cyber-incident-422</guid>
<pubDate>Sun, 08 Nov 2026 01:19:36 GMT</pubDate>
<category>Disruption</category>
<description>07 Nov 2026 · Ukraine · Shevchenkivshchyna municipal heating plant, Ovruch substation

On the evening of November 7, 2026, Russian drones launched a massive attack on energy infrastructure in the Shevchenkivshchyna region of Ukraine. Three of four districts in the region were targeted: Korosten, Zvyagel, and Shevchenkivshchyna. A heating plant in Shevchenkivshchyna was damaged, interrupting central heating to the buildings it served. Additionally, the Ovruch substation was completely destroyed by the drone strikes. Vitaliy Bunechko, head of the military administration of Shevchenkivshchyna Oblast, confirmed the attacks and warned of temporary interruptions to central heating in some buildings until the consequences of the enemy attacks are fully resolved. Ivan Korud, mayor of Ovruch, stated that restoring power would take considerable time and urged residents to prepare for prolonged outages. No casualties were reported from the strikes. Repair work was ongoing as of the time of the report. The article also notes that a separate Russian attack on an energy facility in the Shevchenkivshchyna region on November 6 had caused problems with electricity and water supply in Kyiv, indicating a pattern of sustained pressure on the region's critical energy infrastructure.

Source: Ukraine-Nachrichten – https://ukraine-nachrichten.de/russen-haben-energieversorgung-region-schytomyr-angegriffen-beh%C3%B6rden-warnten-einem-l%C3%A4ngeren-stromausfall_33917</description>
</item>
<item>
<title>Medium-voltage grid fault caused a two-hour power outage in Cottbus-Schmellwitz on Saturday evening.</title>
<link>https://ic-cyber.ai/#incident-418</link>
<guid isPermaLink="false">ic-cyber-incident-418</guid>
<pubDate>Sat, 07 Nov 2026 19:49:55 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026, 17:30 · Germany · Stadtwerke Cottbus, EVC (Elektroenergieversorgung Cottbus)

On the evening of 7 November 2026, a fault in the medium-voltage distribution network caused a power outage in the Schmellwitz district of Cottbus, Germany. According to Stadtwerke Cottbus, the initial fault occurred at 17:30 local time. During fault-localisation switching operations carried out by the grid operator EVC (Elektroenergieversorgung Cottbus), a second fault developed at 18:45, prolonging the disruption. Full power supply was restored at 19:31, meaning the outage lasted approximately two hours. The number of affected households and the root cause of the fault were not disclosed in the utility's statement. This was the second significant outage in Schmellwitz within eight days; on 30 October, a previous fault had left roughly 2,000 grid connections without power for 32 minutes. A separate outage was also reported in the nearby town of Peitz by grid operator Mitnetz Strom, though details were not available at the time of reporting. No cyber cause or external attack was indicated; the incident appears to be a technical fault in the distribution network.

Source: NIEDERLAUSITZ aktuell – https://www.niederlausitz-aktuell.de/niederlausitz-aktuell/orte/cottbus/331590/cottbus-schmellwitz-stromausfall-7-november-2026-mittelspannungsnetz-evc.html</description>
</item>
<item>
<title>Russian strikes on Kyiv energy infrastructure caused widespread blackouts disrupting power, heating, water and public transport.</title>
<link>https://ic-cyber.ai/#incident-416</link>
<guid isPermaLink="false">ic-cyber-incident-416</guid>
<pubDate>Sat, 07 Nov 2026 17:19:47 GMT</pubDate>
<category>Blackout</category>
<description>07 Nov 2026 · Ukraine · Trypilska thermal power plant, electrical substations in Kyiv and Zhytomyr regions, Kyiv municipal services

Russia's Defence Ministry announced that its latest coordinated strikes targeted key Ukrainian military and energy facilities. The attacks hit the Trypilska thermal power plant, electrical substations in the Kyiv and Zhytomyr regions, the Northern Road Bridge in Kyiv, the Meridian enterprise reportedly producing Flamingo missiles, and a cargo vessel allegedly transporting military equipment in the Black Sea. As a direct result, large parts of the Ukrainian capital Kyiv faced emergency power outages. The blackouts disrupted electricity supply, heating systems, water supplies, and public transport across the city, causing widespread paralysis in the capital. Russia framed the strikes as targeting military and energy infrastructure, while the civilian impact was severe, with residents left without power, heat, and water. The article is part of a broader pattern of Russian strikes on Ukraine's energy grid, with multiple similar incidents reported over the preceding months, including strikes on communications and energy sites. The strikes represent a continuation of Russia's sustained campaign to degrade Ukraine's energy infrastructure, particularly as winter approaches, compounding the humanitarian impact on civilians who depend on reliable power and heating for survival during the cold season.

Source: The Times of India – https://timesofindia.indiatimes.com/videos/international/putins-devastating-energy-war-on-kyiv-ukraine-capital-paralysis-amid-widespread-blackout/videoshow/135632998.cms</description>
</item>
<item>
<title>Vodafone experienced widespread service disruptions across Germany affecting internet, mobile, and TV connections.</title>
<link>https://ic-cyber.ai/#incident-413</link>
<guid isPermaLink="false">ic-cyber-incident-413</guid>
<pubDate>Sat, 07 Nov 2026 15:19:37 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026 · Germany · Vodafone

Vodafone customers across Germany reported a significant increase in service disruptions on 7 November 2026. User reports on outage-tracking platforms Allestörungen and Netzwelt indicated problems affecting fixed-line internet (DSL), mobile networks, television services, and the MeinVodafone app and customer portal. According to the aggregated user reports, 61 percent of complaints concerned internet connections, 19 percent TV, and 13 percent mobile services. The reports originated from multiple regions across Germany, suggesting the issue was not confined to a single local fault. Vodafone had not confirmed a nationwide total outage at the time of reporting, and the exact cause of the disruption remained unknown. It was unclear whether the incident stemmed from a single overarching technical failure or from multiple regional problems. Many customers continued to use services normally, and the severity of impact varied by region and access technology. The outage-tracking platforms noted that their data reflected user reports and did not constitute an official Vodafone diagnosis. No information was available on the expected duration of the disruption.

Source: Teltarif – https://www.teltarif.de/stoerung-vodafone-internet-app/news/106018.html</description>
</item>
<item>
<title>Power outage in Baldham Dorf, Landkreis Ebersberg, caused by technical issues or maintenance, lasting about three hours.</title>
<link>https://ic-cyber.ai/#incident-412</link>
<guid isPermaLink="false">ic-cyber-incident-412</guid>
<pubDate>Sat, 07 Nov 2026 12:49:37 GMT</pubDate>
<category>Outage</category>
<description>07 Nov 2026, 11:24 · Germany · Bayernwerk Netz GmbH

On 7 November 2026, a power outage affected residents in the Baldham Dorf district of Hergolding, near Parsdorf in Landkreis Ebersberg, Bavaria, Germany. The disruption began at 11:24 local time and was expected to be resolved by 14:40. The responsible grid operator, Bayernwerk Netz GmbH, dispatched technicians to the site. The cause was not definitively identified; the article notes it could have resulted from planned maintenance work or a technical problem. The outage was described as temporary and limited to an area of roughly one kilometre around Parsdorfer Straße in Vaterstetten (postal code 85599). No cyberattack or external sabotage was indicated. The article also included general advice for residents on how to report outages and prepare for potential blackouts, but the core event was a brief, localised grid disruption handled by the utility's field technicians.

Source: News.de – https://www.news.de/lokales/856451598/stromausfall-parsdorf-hergolding-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
</channel>
</rss>
