Critical Infrastructure Compromise

AI agents in and against grids, water systems, pipelines and telecom.

Dragos counted 119 ransomware groups hitting about 3,300 industrial organizations in 2025, up from 80 groups in 2024. China's Salt Typhoon targeted more than 600 organizations in 80 countries, per the FBI.

Threat groups targeting industry: Ransomware groups, 2024 80; Ransomware groups, 2025 119; OT threat groups tracked 26; OT groups active in 2025 11 THREAT GROUPS TARGETING INDUSTRY Ransomware groups, 2024 80 Ransomware groups, 2025 119 OT threat groups tracked 26 OT groups active in 2025 11 GROUPS, DRAGOS
Industrial orgs hit by ransomware
~3,300
Average OT ransomware dwell
42 days
Salt Typhoon targets
600+
Registry incidents
1

Evidence

State groups from China dominate infrastructure intrusion reporting

Documented cases: critical Infrastructure Compromise
DateCaseCountryWhat happenedSource
Aug 27, 2025Salt Typhoon joint advisoryChina16 agencies from 13 countries named three Chinese companiesSource
Sep 2025GTG-1002 AI-run espionageChinaTargets included chemical makers and government agenciesSource
2025VOLTZITE moves to Stage 2China-linkedSYLVANITE hands access to VOLTZITE for deeper control-system intrusionSource
Jul 8, 2026NIS2 infringement casesEUCommission took Ireland, Spain, France and the Netherlands to court over late transpositionSource

Registry

One registry incident involves critical infrastructure compromise

Registry incidents meet a stricter bar than the cases above: public sources name the developer, the failed control and who found it.

Registry incidents linked to this risk
IncidentDateAgentControl that failed
Chinese State Group Runs Espionage Through Claude CodeSep 2025Coding agentMisuse safeguards bypassed by splitting attacks into routine-looking tasks

Exposure

Four of 17 agent types rate very significant or critical on connectivity surface or physical access

From the attack surface ratings, the agent types where this risk has the widest path in.

Agent types most exposed
Agent typeDimensionRating
Industrial robots and cobotsPhysical accessVery significant
DronesConnectivity surfaceVery significant
Fleets and swarmsConnectivity surfaceVery significant
Smart home assistantsConnectivity surfaceVery significant

Controls that bound it

Rules

Joint guidance covers AI in OT; China raised infrastructure fines tenfold

Rules that address critical infrastructure compromise
RuleJurisdictionWhat it requiresStatus
Principles for the Secure Integration of AI in OTUS and partnersGovernance and safety for AI in OTDec 3, 2025
America's AI Action PlanUSAI-ISAC; secure-by-design AI in safety-critical usesJul 23, 2025
Amended Cybersecurity LawChinaInfrastructure fines up to RMB 10 millionEffective Jan 1, 2026
NIS2 DirectiveEUSecurity and incident duties for essential entitiesDeadline was Oct 17, 2024

Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.

Record

Page Record

Risk group
Human Risks
Datasets
ai_risk_evidence.csv (4 rows); registry incidents (1 linked); ai_attack_surface.csv
Key sources
Salt Typhoon joint advisory
GTG-1002 AI-run espionage
VOLTZITE moves to Stage 2
NIS2 infringement cases
Last verified
October 2026