Cyber threats and energy security: Development and analysis of an incident dataset for the period 2022–2024

Driven by technological progress, cyber threats present one of the most prominent security challenges in the modern world. The ongoing transformation of energy sector is creating increasingly interconnected energy systems that rely on digital technologies. As a vital component of the economy, the energy sector is highly exposed to numerous simultaneous threats, including cyber-attacks, where the motivations behind such incidents are difficult to understand and may range from financial gains to politically motivated targeting. By developing highly resilient components within the energy system, a country can strengthen its wider concept of energy security, protecting the critical infrastructure and continuity of energy supply. This paper aims to provide a sector analysis for a selected three-year period, from 2022 to 2024, applying a thorough research approach to create a broader picture of the current trend. The dataset was developed, reflecting the sector's vulnerability. As a result, major events are presented, indicating the scope of potential threats, their growing complexity and sophistication, and their eventual consequences. The paper highlights the importance of the cyber component within the energy security concept, one which is often insufficiently considered in both theoretical and practical terms. Accordingly, this work aims to provide evidence-based support for an alternative energy security theoretical framework combining security of critical infrastructure and security of supply principles. • Financially motivated incidents prevail, closely followed by politically driven. • The European Union and BRICS are the most impacted, followed by the United States. • The most exposed sub-sectors are the power sector and oil and gas sector. • Energy security fuses security of supply and security of critical infrastructure.