State-sponsored APT groups target the utility industry for its strategic value. They use cyber-attacks to achieve their political and economic goals, like- disrupting a rival country's power grid or stealing sensitive intellectual property related to energy production or distribution. According to Verizon DBIR 2022, in the case of the Mining, Quarrying, and Oil & Gas Extraction and Utilities industries,
Attacks were caused by external threat actors
Of the total data compromised were login credentials.
Of breaches were due to System Intrusion, Basic Web Application Attacks and Miscellaneous Errors.