A cybersecurity specialist has demonstrated how easily photovoltaic panel systems can be compromised, creating a breach that could threaten the stability of the entire European energy grid. The explosion in solar energy use brings not only benefits but also major security risks.
Alarming discovery: how security was compromised
Using just a laptop and a smartphone from his home in Thessaloniki, Greece, cybersecurity consultant Vangelis Stykas managed to bypass safeguards protecting photovoltaic systems globally. According to Stykas, a malicious hacker could shut down inverters, infect systems with malware or plant digital booby traps. These vulnerabilities could be exploited to disable entire grids, with devastating effects on energy security.
“We are increasingly dependent on these devices. If they can be attacked, the whole European energy grid becomes vulnerable,” said Stykas, co-founder of cybersecurity firm Atropos.ai.
Inverters: photovoltaics’ weak link
The study identified inverters as the critical points of solar systems. These devices, which convert light into usable electricity and are connected to the cloud, are becoming prime targets for cyber attacks. The explosive growth in the number of photovoltaic panels installed on residential rooftops – estimated to reach more than 100 million households by 2030, according to the International Energy Agency (IEA) – has created millions of vulnerable connection points.
The potential impact of attacks: a cascading risk
If a significant portion of the inverters were compromised simultaneously, the effects could include:
- The cascading collapse of the energy grid, affecting power supplies across an entire continent.
- Inability to manage energy demand at critical times, which could lead to widespread power outages.
“There is a certain naivety about the risks. There should be more concern than there currently is,” said Harry Krejsa, director of the Carnegie Mellon Institute for Strategy & Technology.
Systemic problems: low costs, compromised security
Another aggravating factor is pressure on supply chains. The high demand for photovoltaic equipment has led many energy companies to work with unknown manufacturers that prioritize low cost over security. Many of these suppliers do not invest in experienced programmers or advanced software development, leaving equipment exposed.
Cyber attacks become reality: the case of Electrica SA
Vulnerabilities are not just theoretical. Recently, the Romanian company Electrica SA, which supplies energy to about 4 million people, reported a cyber attack. The coordinated response with national authorities reflects the urgency with which such threats must be addressed.
Solutions: what to do to protect your network
Experts stress that urgent action is needed to reduce vulnerabilities:
- Create strict cyber security standards for inverters and other photovoltaic components.
- Implement real-time monitoring systems to identify and block attempted attacks.
- International collaboration between governments, companies and cyber security experts.
Solar energy benefits threatened by lack of security
While photovoltaic panels are a key solution in the global energy transition, the lack of adequate cybersecurity measures can turn this progress into a major risk. In an increasingly connected world, protecting energy grids is not just a national priority but a global necessity.
