When the Lights Go Out: Blackout as a Test of Modern Society's Resilience

The Polish Incident as a Warning for the Entire Region

At the end of December 2025, Poland faced one of the most serious cyberattacks on its energy sector in recent years. According to statements by the Polish Minister for Digital Affairs, it was a targeted attempt to disrupt the functioning of the electricity system with the clear intention of causing a power supply outage. The country managed to prevent a large-scale blackout, but the very nature of the incident significantly shifted the perception of hybrid threats in the Central European area.

Poland is not an isolated case in this regard. It is among the countries most exposed to long-term hybrid pressure, and in the first three quarters of 2025 it recorded approximately 170,000 cyber incidents. However, the attack on the energy grid crossed a new threshold and demonstrated that critical infrastructure can be the target of operations whose consequences affect millions of citizens without a single conventional military action taking place.

Anatomy of a Large-Scale Outage

The term "blackout" is often used in a simplified way in the media. From a professional standpoint, however, it refers to a precisely defined phenomenon: a sudden and unplanned collapse of the electricity system across a wide area, which exceeds the ability of standard protective mechanisms to maintain the balance between generation and consumption. It occurs within seconds, but restoring supply can take hours or even days, because the grid must be restarted gradually, block by block.

The cause is usually a chain reaction of multiple factors — technical, operational, and human. An isolated failure is generally not enough. The problem arises when several weak points coincide within a short time window which, under normal circumstances, would have been caught. This is precisely why blackouts are often described in the professional literature through the "Swiss cheese model": protective layers function properly, but if the holes in them happen to align, the system fails.

This principle was illustrated by the large-scale outage that struck Spain, Portugal, and parts of France in 2025. Approximately 55 million people were left without electricity, internet availability dropped by 80 percent, transport was seriously affected, and economic losses exceeded 1.6 billion euros. A few weeks later, a smaller but equally tangible blackout hit the north of the Czech Republic, where the outage affected one million supply points and lasted up to twelve hours.

The Cascading Effect Across Sectors

A specific characteristic of the energy sector is its position as the fundamental platform on which almost all other sectors of critical infrastructure rely. A power supply outage does not stop at the boundary of a single sector. Within hours, it affects transport, telecommunications, water management, the financial sector, healthcare, and public administration.

Backup power sources in sensitive facilities are designed as a bridging solution, not as a permanent substitute. Mobile networks gradually shut down once the batteries in their base stations are depleted. Water utilities depend on the electric drive of pumping stations. Logistics chains, which today operate on a "just in time" basis, lose their ability to respond after just a few hours. It is precisely this interconnectedness that makes a blackout an event extending far beyond the economic category of a "service outage."

The Combination of Threats Is Expanding



The risks that can lead to a large-scale outage have not only intensified in recent years but have also diversified. In addition to traditional technical causes and extreme weather events, cyber operations, physical sabotage, and hybrid activities in the grey zone between accident and intent have emerged.

At the same time, the European electricity system is under pressure from an ongoing transformation — namely, the integration of renewable sources, changes in the structure of generation, and growing demands for flexibility. This development is well-founded, but it also increases the technical complexity of managing the grid. Analysis of the Spanish blackout indicated that a key role was played by a combination of low system inertia, a shortage of stabilising sources, and limited cross-border interconnection in the region. The cause was not renewable sources themselves, but rather the way the system was prepared for their integration.

To these factors must be added long-underfunded maintenance and postponed investments in transmission and distribution infrastructure, which analysts across Europe have been pointing out. The result is an environment in which the resilience of the energy system is becoming a strategic issue of the highest order.

Slovakia in the European Context

Slovakia is an integral part of the European electricity system, and its energy interconnections with neighbouring countries are among the most developed. This brings fundamental advantages, such as greater stability, the possibility of cross-border assistance, and more efficient use of resources. At the same time, however, it means that events in neighbouring countries have a direct impact on the Slovak system as well.

The state's response is reflected in strategic documents adopted in recent months. The Resilience Strategy for Critical Entities of the Slovak Republic and the National Cybersecurity Strategy for 2026–2030 create a framework for the systematic strengthening of the preparedness of key sectors. Act No. 367/2024 Coll. on Critical Infrastructure introduces specific obligations for critical entities in the areas of risk assessment, continuity planning, and incident response. The year 2026 marks the first year of full practical application of this framework.

"The topic of blackouts has, in recent months, been moving from professional discussions into the strategic sphere. Not because we face an imminent threat of collapse, but because the combination of factors that can cause a large-scale outage has genuinely expanded. The answer is not fear, but systematic preparedness at the level of the state, critical entities, and the professional community that connects them," states Tibor Straka, President of The Critical Infrastructure Association of the Slovak Republic.

Resilience as a Shared Responsibility

Experience from recent incidents in Europe confirms several fundamental conclusions. First, the protection of the energy system is no longer merely a technical task; it is a cross-cutting strategic issue that requires coordination between operators, state authorities, security services, and professional platforms. Second, the boundary between physical and cybersecurity is gradually disappearing; an effective defence must cover both dimensions simultaneously. Third, resilience cannot be built reactively. It requires long-term investment, professional capacity, and the ability to learn from incidents that have occurred elsewhere.

It is in this context that professional platforms connecting actors operating in the field of critical infrastructure play an important role. The Critical Infrastructure Association of the Slovak Republic (AKI SR) provides a space for professional discussion, the sharing of experience, and coordination across sectors. For critical infrastructure entities, it represents a partner capable of translating complex risks into manageable measures — from vulnerability assessments to preparation for scenarios that, until recently, belonged more to the realm of theoretical analysis.

The stability of electricity supply is among the silent prerequisites for the functioning of modern society. Precisely because we usually do not notice it, it is essential to devote systematic and strategic attention to its protection.