Berlin spent days in the dark earlier this month after an arson attack crippled part of its power grid, marking the city’s longest blackout since World War II and forcing Germany to confront the fragility of its critical energy infrastructure.
Electricity was restored to southwestern Berlin last week after an arson attack on 3 January left around 45,000 households and more than 2,000 businesses without electricity in freezing winter conditions for about four days. Officials say the blackout affected as many as 100,000 people, leaving some homes without heating and disrupting mobile networks, hospitals, and transport services.
Investigators quickly ruled out a technical fault. Instead, police say someone set fire to a cable bridge carrying high-voltage lines in the Lichterfelde area, triggering the blackout. A letter claiming responsibility surfaced online from a fringe left-wing group calling itself the Vulkangruppe, though the organisation later distanced itself from the actions. The investigation has since been elevated to the Federal Prosecutor’s Office on grounds that include terrorism and arson.
The damage inflicted on the grid in Germany has provoked sharp criticism. German media have lambasted authorities for what many see as a slow and disjointed response after residents were “forced to sleep in gymnasiums,” according to reports, and political pressure has even mounted on Berlin’s mayor amid revelations about his conduct during the crisis.
The outage has also reignited debate about resilience and risk in an era when physical attacks on infrastructure are climbing the threat agenda.
The Verband kommunaler Unternehmen (VKU), representing municipal utilities, has called for the establishment of a national crisis electricity reserve and sweeping regulatory reforms to enable faster response in future emergencies; according to reports, authorities only convened a crisis team 13 hours after the attack was reported.
In a statement, VKU President Ulf Kämpfer said the Berlin outage exposed how vulnerable Germany’s grids have become, and urged lawmakers to ensure power can be provisionally restored within 24 hours in the event of “major damage incidents.” Among other measures, the utility group wants mobile power generation assets pre-positioned across the country, a single point of coordination for crisis activation, and streamlined legal frameworks to prevent bureaucratic delays in disaster response.
What happened in Berlin shows that power grids are now fair game for disrupting small and very large communities and their critical services.
Moreover, the line between physical attacks and cyber disruption is blurring.
Ukraine’s power grid was targeted in 2015 by Russian-linked hackers using BlackEnergy malware, cutting power to roughly 230,000 consumers, and again in 2016 by hackers using the Industroyer malware, which shut down parts of Kyiv’s grid. These incidents are among the first known examples of cyberattacks designed to physically disrupt electric infrastructure in a major economy.
The 2020 blackout in Mumbai, which disrupted hospitals and transport across the city, is also widely cited by researchers as an example of cyber activity intersecting with real-world power disruption. Indian investigators and researchers linked the outage to a cyber intrusion into regional power systems, with evidence pointing to Chinese state-linked groups.
German cyber authorities and EU officials have also warned that as power networks become more decentralised and digital, especially with renewables, they are creating new cyber vulnerabilities. Even when there’s no physical damage, a successful intrusion can still cut electricity to homes and critical services.
Whether the trigger is a match or a line of malicious code, the power grid has become an easy way to cause disruption. The question now is not whether such attacks will happen again, but whether countries can restore power fast enough when they do.
