Electrical Grid Under Attack: How Slovakia Can Avoid the Spanish Nightmare

19. mája 2025

Following the recent massive power grid failure in Spain, which paralyzed the country for 24 hours, Slovakia faces the challenge of securing its energy infrastructure during ambitious green transformation and growing cyber threats.

Last month, Spain was plunged into darkness. A massive power grid failure paralyzed the country for almost 24 hours. Millions of people were left without electricity, public transportation stopped, hospitals had to switch to emergency generators, and economic losses soared into millions of euros. This collapse of critical infrastructure revealed the vulnerability of modern energy networks and sent a warning signal to all of Europe. Preliminary investigation suggests that one of the factors might have been insufficient integration of renewable energy sources into the existing grid, which, combined with cyber vulnerabilities, created a perfect breeding ground for systemic failure.

While Slovakia is moving toward an ambitious goal of 19.2% energy from renewable sources by 2030, the Spanish catastrophe reminds us that green transformation brings opportunities but also many risks. Our future energy grid with 1,755 MW from hydroelectric power plants, 1,200 MW from solar, and 500 MW from wind will face new challenges—from grid instability to cyber threats.

Fortunately, Slovakia has not been idle. By adopting the National Cybersecurity Strategy in 2021 and the recent amendment to laws on cybersecurity and critical infrastructure (effective from January 2025), we have become the fourth EU country to implement the NIS2 and CER directives. This proactive action positions us as a leader in critical infrastructure protection.

To avoid the Spanish scenario, we need triple protection. Technical solutions include intelligent grid management and automatic partitioning systems that isolate affected areas during failures. Security monitoring ensures continuous oversight of both IT and OT systems, enabling early threat detection. Strong governance based on risk assessment and international cooperation allows for sharing practices and coordinated response to threats. The Spanish blackout reveals two sides of energy transformation—a green future and potential risks. With a well-thought-out strategy, Slovakia can achieve both cleaner energy and a secure network resistant to attacks.

Author: Matej Michalko, founder and CEO of Decent Cybersecurity, Chairman of the Supervisory board of the Critical Infrastructure Association of the Slovak Republic

Michalko, Matej. “Elektrická sieť pod útokom: Ako sa Slovensko môže vyhnúť španielskej nočnej more.” DefenceNews.sk, May 16, 2025. https://www.defencenews.sk/kyberbezpecnost/clanok/752177-elektricka-siet-pod-utokom-ako-sa-slovensko-moze-vyhnut-spanielskej-nocnej-more/. 

11. decembra 2025
On Thursday, December 4, 2025, a joint meeting of the Presidium and Supervisory Board of the Critical Infrastructure Association of the Slovak Republic took place.
11. decembra 2025
Vo štvrtok 4. decembra 2025 sa uskutočnilo spoločné rokovanie Prezídia a Dozornej rady Asociácie kritickej infraštruktúry Slovenskej republiky.
3. decembra 2025
The Critical Infrastructure Association of the Slovak Republic (AKI SR) expresses serious concern over the cybersecurity incident that was identified at the Ministry of Economy of the Slovak Republic .
3. decembra 2025
Asociácia kritickej infraštruktúry Slovenskej republiky (AKI SR) vyjadruje vážne znepokojenie nad kybernetickým incidentom, ktorý bol identifikovaný na Ministerstve hospodárstva SR .
27. novembra 2025
The Critical Infrastructure Association of the Slovak Republic (AKI SR) actively participated in the Autumn ITAPA 2025 conference, which took place on November 25–27 in Bratislava.
27. novembra 2025
Asociácia kritickej infraštruktúry Slovenskej republiky (AKI SR) sa aktívne zúčastnila konferencie Jesenná ITAPA 2025, ktorá sa konala 25. – 27. novembra v Bratislave.
25. novembra 2025
The Critical Infrastructure Association of the Slovak Republic considers the adoption of Act No. 318/2025 Coll. to be a fundamental step in the field of cybersecurity of the Slovak Republic. This legal regulation systematically implements the European Cyber Resilience Act for the first time and regulates the way in which digital products – from software, through IoT devices to specialized technologies used in industry – will be placed on the market and controlled from the perspective of cyber resilience.
25. novembra 2025
Asociácia kritickej infraštruktúry SR považuje prijatie zákona č. 318/2025 Z. z. za zásadný krok v oblasti kybernetickej bezpečnosti Slovenskej republiky. Tento právny predpis prvýkrát systematicky implementuje európske nariadenie Cyber Resilience Act a upravuje spôsob, akým budú digitálne produkty – od softvéru, cez IoT zariadenia až po špecializované technológie používané v priemysle – uvádzané na trh a kontrolované z pohľadu kybernetickej odolnosti.
14. novembra 2025
Asociácia kritickej infraštruktúry SR (AKI SR) dôrazne odmieta snahu poslankyne NR SR Veroniky Remišovej a Juraja Magušina zatiahnuť odbornú a apolitickú organizáciu do lacného politického boja. Ich verejné vyjadrenia sú faktograficky nesprávne, zavádzajúce a poškodzujú dobré meno asociácie aj jej členských subjektov.
29. októbra 2025
Košice, October 28, 2025 — The Critical Infrastructure Association of the Slovak Republic (AKI SR) welcomes the signing of a memorandum of cooperation in the field of soft target protection between the Technical University in Košice (TUKE) and the Ministry of Interior of the Slovak Republic.