VoltBreach / BreachCalc

Operational impact · Financial exposure

BreachCalc

Loading sector assumptions…

INCIDENT LAB / 01 · INTERACTIVE EXERCISE

Solar farm.
Loss of visibility.

A compromised monitor. A critical trust boundary. Two possible outcomes.

SIMULATED TELEMETRY
Research-based · Fictional plant

Loading Bruce Mellow narration…

FICTIONAL SITE / 50 MW NAMEPLATET+00 min
Remote accessExternal network
Monitoring gatewayNormal telemetry
MONITORING / CONTROL TRUST BOUNDARY
Plant controllerApproved settings
Grid connection40 MW export

Illustrative topology. No connection to operational equipment.

STAGE 1 / 5

The documented starting point

40 MWModeled output
0 MWhCumulative lost energy
$0Energy revenue loss

Evidence, assumptions & calculation

Confirmed: CONTEC’s May 7, 2024 notice describes exploitation of SolarView Compact devices and backdoors supporting unauthorized relay activity. It does not establish a generation outage.

Hypothetical: This 50 MW plant, weak control boundary, output changes, response timing, and recovery are training assumptions. Forescout’s SUN:DOWN research documents 46 vulnerabilities across three vendors; it is vulnerability research, not evidence that this fictional outage occurred. DOE explains how unauthorized inverter control changes can affect electrical output.

Constant available output: 40 MW. Delayed branch intervals: 10 minutes at 40 MW, 15 at 40 MW, 20 at 16 MW, then 15 at 32 MW. Lost energy = Σ (40 − output) × minutes ÷ 60 = 10 MWh; at $60/MWh, $600 in lost energy revenue. Early containment assumes no production loss. No weather, ramp-rate, response expense, penalties, damage, or grid-frequency model is included. Stage values show cumulative interval totals; playback time is compressed.

Loading calculator…

Saved scenarios

Saving, sharing and PDF export require an active license. Public calculations remain available offline.