Lubbock Power & Light, the municipal utility serving 110,000+ customers, reported a cybersecurity incident in April 2025 disrupting billing and customer service systems. Customer PII in scope; OT infrastructure reported unaffected.
Ransomware targeting billing and customer information systems. Utility IT/OT boundary was maintained. Initial vector under investigation.
Sentinel ($89/ep/mo) — 24/7 SOC + SIEM. Fortress ($109/ep/mo) — Sentinel + EDR management + vulnerability management. Command ($129/ep/mo) — Fortress + vCISO + compliance mapping + IR plan. See full tier comparison →
| Regime | Standard / Citation | Gap Identified |
|---|---|---|
| NERC CIP | CIP-003-8 | Cybersecurity management controls for utility operations |
| TDPA | Tex. B&C Code §521.053 | 110,000 Lubbock utility customer notifications pending |
CoreRecon cites verifiable public sources only. No speculation on unverified attribution is published. Threat actor attribution appears only where publicly confirmed by law enforcement or the organization.
Free $2,500 security posture assessment for Texas organizations. We map your gaps against the same attack vectors used in this incident. No contract, no commitment.