The Grid Ransom Ultimatum
Attackers seize control of multiple regional transmission operators and demand legal immunity rather than money.
A coordinated cyber operation compromises multiple regional transmission operators and demonstrates the ability to trip substations at will. Instead of demanding payment, the attackers demand legally guaranteed safe passage, immunity, and public acknowledgement that they still control the grid.
You are the Secretary of Energy
The Situation Room
>Utilities can island some regions briefly, but not without rolling blackouts and industrial shutdowns.
>The FBI wants to treat the demand as a hostile strategic operation, not ransomware, and refuses any concession.
>Hospitals and water authorities warn that they have maybe forty-eight hours of graceful degradation before public harm becomes mass-scale.
Internal Briefing Notes
• Grid operations rely on tightly synchronized control systems that are hard to rebuild under live compromise.
• Restoring service after deliberate regional trips is slower and more dangerous than many civilians assume.
• Granting immunity to attackers could encourage every future infrastructure extortion campaign to demand policy rather than cash.
Escalation Window
Reveal each phase to see how the situation deteriorates.
The attackers do not want money. They want precedent. What is your line?
Choose your response. There are no good options.
You avoid legitimizing infrastructure extortion, but accept widespread civilian suffering in the near term.
You may regain the grid faster, but teach future attackers that coercion against civilians works.
You might break their control quickly, but risk provoking them to collapse major regions before they lose access.
Related Entities
Explore the institutions, countries, and actors involved in this scenario.
Scenario Lab Feedback