American Electric Utilities

Profile narrative

AmericanElectric Utilities, also known as AEU, is an electric utility headquartered in the United States of America. The company provides electricity services to customers within its service territory, which is located in the United States. As an electric utility, its core function is the delivery of electrical power to residential, commercial, and industrial consumers. Operating within the regulated energy sector, AEU is subject to oversight by federal and state authorities that govern reliability, safety, and market practices. The organization’s role as a provider of essential power places it within the nation’s critical infrastructure.

AEU’s distinguishing attributes stem from its position as a critical infrastructure asset, making it a target for cyber‑as a critical infrastructure asset, making it a target for cyber‑threat actors seeking to disrupt essential services. In January 2019, Iranian state‑sponsored hacking groups Magnallium (also known as APT33) and Parisite conducted sustained cyber intrusion attempts against the utility, employing password‑spraying campaigns and exploiting vulnerabilities in VPN software. Although the attackers maintained persistent efforts to gain network access, investigators found no evidence that they could compromise physical grid control systems or cause operational disruptions such as blackouts. The same groups have historically used similar access to deploy wiper malware that erases data and impairs business operations in other sectors, raising concerns about potential follow‑on actions. AEU remains subject to the regulatory framework governing electric utilities, which includes requirements for cybersecurity risk management and incident reporting. No further details about ownership, parent, or subsidiary relationships are provided in the source material.

Incidents

1 incident linked to this organisation.