Water, Power and the Civilian Cost of Cyber Risk

A power cut can interrupt water and health services. The first task is to restore them; the second is to find out what actually happened.

At a city clinic, the generator starts and the lights return. The taps remain dry. The water pump depends on a building system that has not come back online; the vaccine refrigerator is running, but there is no clean water for handwashing or sterilization. Patients experience one emergency. The utility and investigators still have to determine whether the original power loss came from equipment failure, a grid imbalance, weather, planned maintenance or a cyber incident.

That distinction matters. A power outage is an observable service failure. A cyberattack is one possible cause. Attribution to a particular actor is a further claim, requiring evidence. Collapsing these three steps can misdirect response, spread alarm and make an already difficult repair harder.

The service chain behind the switch

Water systems use electricity to pump, treat and distribute water, and to move wastewater through lift stations and treatment plants. Some treatment processes can continue briefly through stored water, gravity flow, backup power or manual operating procedures. The margin depends on the design of the system, the duration of the interruption and whether backup systems are maintained and can be fueled.

The electric grid itself is a complex physical and digital system. Information technology (IT) generally supports tasks such as billing, email and records. Operational technology (OT) monitors or controls industrial processes and equipment. The two are different in function and risk: an email outage may interrupt customer service without stopping a pump, while an OT problem can affect the ability to monitor or safely operate equipment. A cyber incident in one part does not automatically mean the other has been compromised.

Nor does every blackout point to a malicious act. The International Energy Agency’s Electricity 2026 describes major outages in 2025 caused by combinations of technical and operational factors, including voltage instability in Iberia and equipment failure in Chile. An outage is the result to investigate, not proof of its cause. A cyber attribution requires evidence from operators and investigators; the public may not see it immediately, and a viral claim is not a forensic finding. IEA, Electricity 2026: Reliability

This is why water utilities are advised to plan for both cyber incidents and ordinary power failures. The U.S. Environmental Protection Agency’s power-resilience guidance urges utilities to coordinate with electric providers, understand essential loads, maintain backup generation and plan how to fuel it. Its cybersecurity guidance emphasizes knowing which IT and OT assets the utility depends on, keeping response and recovery plans, and maintaining tested backups. These are service-continuity measures, not evidence that an attack has happened. EPA, Power Resilience Guide for Water and Wastewater Utilities, updated May 2023; CISA, EPA and FBI, Top Cyber Actions for Securing Water Systems, 21 February 2024

The same logic appears in the North American electric-sector rules administered through NERC. Its 2026 Critical Infrastructure Protection Roadmap describes asset knowledge, access management, incident response and recovery as foundational cyber-resilience practices. NERC standards apply to the North American bulk power system; they are not Kenyan regulations. Their broader lesson is that reliability requires governance and practiced recovery, not just protective technology. NERC, Critical Infrastructure Protection Roadmap, January 2026; NERC, CIP-008 incident reporting and response standard

The European Union Agency for Cybersecurity (ENISA) provides another warning about dependency. Its 2026 NIS360 assessment places drinking water, wastewater and health in a “risk zone,” where the sectors’ importance exceeds their measured cybersecurity maturity. That is an assessment of EU-sector preparedness, not evidence of attacks against Kenyan utilities. ENISA’s point is that the services most vital to daily life can still have uneven readiness across organizations. ENISA, NIS360 2026, 28 May 2026

A clinic’s resilience depends on water, fuel and refrigeration

At a health facility, electricity supports far more than lights. The World Health Organization lists essential services including safe childbirth, diagnostics, communications, clean water, vaccination, oxygen and emergency care. Refrigerators protect vaccines, blood products and some medicines. Autoclaves and other equipment rely on both power and water. If the grid fails, generators can help, but they only provide a bridge if they start, are maintained, have enough fuel and can support the equipment the facility has prioritized. WHO, “Electricity in health-care facilities,” 14 October 2026; WHO, Checklist for assessing vulnerabilities in health-care facilities in the context of climate change, 2020

Fuel is a dependency in its own right. A diesel generator transfers some reliance from the grid to fuel delivery, storage, maintenance and staff who know how to operate it. A long outage can outlast a small tank or disrupt a supplier. A battery system can bridge a shorter interruption and support sensitive equipment, while solar and other distributed sources may extend resilience if properly sized and maintained. None is a universal substitute for the grid: a clinic’s needs include equipment start-up loads, refrigeration, pumps and the ability to recharge. The IEA notes that emergency oil stocks can help keep generators serving hospitals and water utilities during prolonged outages, while distributed resources can preserve essential functions when interconnected systems are damaged. IEA, Energy System Resilience, 11 February 2026

Kenya’s national health-facility census makes the issue concrete without reducing it to a story of failure. In 2023, the Ministry of Health surveyed 12,375 facilities. It found that 89% reported a reliable power source, 83% a reliable water source, and 41% backup power. Safe water access, defined in the report as borehole or piped/municipal water, was 67%. These figures do not describe Nairobi alone, do not report how often outages happen, and do not show whether a backup generator is sufficient for every clinical load. They do show that access to power and the capacity to ride through a failure are different measures. Ministry of Health, Kenya, Health Facility Census, September 2023

In Nairobi, clinics and hospitals sit inside a dense network of utilities, roads, fuel suppliers and private services. That concentration creates useful redundancy: water can come from different sources, facilities can transfer patients, and essential staff may reach several sites. It also creates shared dependencies. A pump station without power affects many customers; a clinic may have a generator but still depend on municipal water, oxygen suppliers, refrigerated distribution or network access. Urban density is not the same as guaranteed continuity.

Responsibility should follow the institutions that operate the systems. Utilities need outage plans, clear public communication and coordination with hospitals, water companies and emergency management. Health facilities need to know which clinical services must continue first and what power, water and fuel those services require. County and national authorities can coordinate mutual aid, emergency fuel supply, tanker access, patient transfers and backup equipment procurement. Households can store modest amounts of safe water where practical, but a family should not be expected to replace a utility’s resilience program or a clinic’s power plan.

Affordability matters. A small facility cannot always buy a generator, battery system and on-site fuel reserve. A larger hospital may have several layers but still face the cost of maintenance and testing. Health and water agencies must budget for continuity as part of ordinary service delivery, not only as a last-minute emergency purchase. WHO’s October 2026 guidance calls for systematic measurement of facility energy needs, suitable solutions, institutional capacity and adequate resources. WHO, “Electricity in health-care facilities,” 14 October 2026

Resilience is also a public-health intervention

A water outage can affect hygiene, safe childbirth, cleaning, dialysis and medication. A prolonged refrigeration failure can compromise vaccines or other temperature-sensitive supplies. A wastewater pump outage can create public-health and environmental hazards. These effects do not wait for investigators to determine whether a cyber operation was involved. The immediate response is to protect patients, maintain essential water and sanitation, keep cold-chain supplies within safe conditions, and tell people clearly what services are available.

Continuity plans work best when the institutions practice them together. A clinic should know what it can keep operating on backup power and how long. A water utility should coordinate restoration priorities and alternative supply arrangements with health services. Grid operators, fuel suppliers and emergency managers should rehearse how they communicate when normal phone or internet services are unavailable. Backups should be tested; generators need fuel and maintenance; stored water needs safe handling; staff need clear decision roles. These are high-level safeguards that reduce harm whether the cause is a storm, a failed component, a planned outage or a cyber incident.

This countercase is important: connected systems create exposure, but they also make essential services more efficient and easier to coordinate. Backup power, water storage, alternative pumping, solar-and-battery systems, manual procedures and mutual aid can prevent one failure from becoming a cascade. Kenya’s national facility figures show both reach and uneven backup capacity; they do not imply that an outage will become a public-health emergency. Preparedness is about ensuring that the buffer is real before the power goes out.

As of 24 October 2026, the evidence cited here does not establish a cyber cause for any particular outage without an investigation. The sources instead document service dependencies and the work needed to keep essential systems running. When the lights fail, officials should say what is known, what remains under investigation, and how water and care will continue. A clear attribution can come later. A clinic needs power and water now.

Evidence cutoff: 24 October 2026. Defensive measures are described at a high level; outages and cyber incidents are treated as distinct causes and claims.

Sources

• IEA, Electricity 2026: Reliability
• EPA, Power Resilience Guide for Water and Wastewater Utilities
• CISA, EPA and FBI, Top Cyber Actions for Securing Water Systems, 21 February 2024
• NERC, Critical Infrastructure Protection Roadmap, January 2026
• NERC, CIP-008 incident reporting and response standard
• ENISA, NIS360 2026, 28 May 2026
• WHO, “Electricity in health-care facilities,” 14 October 2026
• IEA, Energy System Resilience, 11 February 2026
• Ministry of Health, Kenya, Health Facility Census, September 2023

Inside Hong Kong’s Tai Hang Tung flood-storage pumping station, photographed in 2018. File photo of urban water infrastructure, not a Kenyan installation. Credit: Wpcpey, via Wikimedia Commons. Image source · CC BY-SA 4.0 International