NWPPA Morning Brief
A six-month pilot from NWPPA: a daily, 10- to 12-minute energy and policy intelligence briefing for community-owned electric utilities in the Western United States. New episodes publish every weekday morning, typically by 6:15 AM Pacific.
NWPPA Morning Brief
NWPPA Morning Brief - Tuesday, August 04, 2026
Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.
NWPPA Morning Brief — Tuesday, August 04, 2026
In today's brief:
Top Federal Developments
- Senate Permitting Deal Slips Past August Recess — https://www.eenews.net/articles/permitting-deal-may-come-after-recess-negotiators-say-thats-ok/
Worth Knowing
- A coordinated cyberattack in late July hit more than 30 Minnesota community water systems, with attackers… — https://www.techradar.com/pro/security/hackers-are-going-after-our-water-now-over-30-minnesota-utilities-hit-in-coordinated-cyberattack-by-apparent-iranian-attackers
- The U.S. cyber insurance market loss ratio — the share of premiums paid back out in claims — rose to 53 in… — https://www.insurancejournal.com/magazines/mag-features/2026/07/27/878813.htm
Pilot notice: AI-generated daily briefing. Verify before acting on it.
Before we begin, a quick note. The NWPPA morning brief is Generative AI, daily intelligence on the federal and Western developments shaping public power. It isn't human-reviewed before publication, so treat it like any AI tool and verify what you'll act on or cite. Sources are in the show notes. You're listening to the NWPPA morning brief. On today's brief, a coordinated cyberattack on more than 30 Minnesota water utilities targeting operational technology, the Senate permitting deal slipping past August recess, Western spot prices for delivery today, and what a rising cyber insurance loss ratio may signal for utility risk programs. Today's briefing is brought to you by NWPPA's Northwest Innovations in Communications Conference, September 21st to 24th in Walla Walla, Washington. Four days of storytelling, strategy, and connection for the communicators of public power. Register at nwppa.org.
SPEAKER_00The Cyber Story Out of Minnesota is the lead today, and not because water utilities are our direct constituency, it's because the attack vector, operational technology controlling pumps, wells, and treatment systems, is directly transferable to electric distribution SCADU environments. 30 plus utilities hit in a coordinated action attributed to Iranian affiliated actors is not a theoretical threat model anymore. That's a demonstrated capability at scale.
SPEAKER_01And the timing matters. This is late July, midsummer, when small utility staffing is thinner and incident response is slower. That's not an accident in attack planning.
SPEAKER_00Let's get into it. Start with the Minnesota OT cyberattack. More than 30 community water systems in Minnesota were hit in a coordinated attack in late July, with attackers going after operational technology, the systems controlling pumps, wells, water towers, and wastewater infrastructure, rather than business IT. Brahham experienced a temporary water treatment plant shutdown, and Minnesota activated statewide incident response. Reporting attributes the attack to apparent Iranian affiliated actors.
SPEAKER_01The tradecraft is what public power security programs need to sit with. Small water utility SCADA environments and small electric distribution control systems share a lot of architecture. Aging hardware, limited IT staffing, similar remote access configurations. An attacker who has mapped one has a significant head start on the other. 30 plus simultaneous hits also signals reconnaissance and coordination, not opportunistic scanning.
SPEAKER_00The question for public power CIP programs is whether their OT segmentation, monitoring, and incident response plans were built for this kind of coordinated, sector-targeted action, or for the older model of ransomware hitting the business network. Those are meaningfully different threat postures.
SPEAKER_01And the scale here is what changes the risk calculus. One incident is an outlier. 30 plus is a pattern. Shifting to Washington, the Senate permitting deal is flipping. Bipartisan negotiators have publicly acknowledged the energy permitting overhaul will not close before the August recess and will carry into the fall. Senate Energy Ranking Member Martin Heinrich cited the White House as the complicating factor, Defense Department restrictions on wind approvals, Interior Department scrutiny of wind and solar on public lands, and a proposal to roll back tribal consultation requirements under the National Historic Preservation Act.
SPEAKER_00The provisions Western Public Power has been tracking most closely, transmission siting reforms and categorical exclusions, the streamlined project approvals that bypass full environmental review remain unresolved heading into campaign season. Fall floor time will compete directly with appropriations and midterm politics. That's a narrower window than it sounds.
SPEAKER_01Heinrich's framing is worth noting, though. He said the effort remains viable this Congress, and that negotiators are willing to keep working through recess. That's a door open signal, not a collapse. But project planning timelines built around a 2026 permitting bill need buffer.
SPEAKER_00The practical read is that the vehicle, the payforce, and the transmission provisions are all still fluid.
SPEAKER_01Government affairs teams watching for the transmission title specifically, that piece has the most direct interconnection impact, should expect the fall calendar to be the real test.11.
SPEAKER_00Western spot prices for delivery today. Sumas natural gas at $2.45 per million BTU, Mid-Columbia Power at $112 per megawatt hour.
SPEAKER_01On the capital side, the 10-year Treasury yield was 4.75% on July 31st, up from 4.68%. Comex Copper settled at $6.64 per pound on August 3rd, up from $6.51.
SPEAKER_00Turning to the cyber insurance picture, AM Best is reporting that the U.S. cyber insurance market loss ratio, the share of premiums paid back out in claims, rose to 53 in 2025. That's the first time it's crossed 50 since the pandemic era ransomware spike. Third-party claims are trending up roughly 30%, and the first quarter of 2026 marked the eighth consecutive quarter of price cuts in the U.S. cyber market.
SPEAKER_01Falling prices and rising loss ratios together is a historically reliable signal that underwriters are about to tighten terms. For utility risk managers heading into renewal conversations, the market may look attractive on price right now, but the coverage conditions behind that price are worth scrutinizing closely.
SPEAKER_00For the one to watch, I'd bring it back to the OT cyber story and the broader question it raises for public power security posture. The Minnesota attack demonstrated coordinated, sector-targeted OT intrusion at a scale we haven't seen against community utilities in the U.S. The question now is whether that tradecraft migrates to electric cooperatives, to small PUDs, to any utility running older SCADU hardware with limited dedicated cybersecurity staffing. Those environments are widespread in the West.
SPEAKER_01The cyber insurance data reinforces it from a different angle. Rising loss ratios, climbing third-party claims, and eight straight quarters of price cuts. That combination tells you the market priced this sector too lightly and is recalibrating. What that means for small public power utilities renewing policies in the next six to twelve months is worth watching very closely.
SPEAKER_00The permitting story and the cyber story aren't connected, but they both point at the same underlying condition. Western public power is navigating a federal environment where the rules and the risks are shifting faster than the institutional processes designed to manage them.
SPEAKER_01And the OT attack in Minnesota is a useful forcing function. Not theoretical anymore. A demonstrated playbook attributed to a nation state affiliated actor targeting community scale infrastructure. That's the landscape. That's your NWPPA morning brief for Tuesday, August 04th, 2026. Sources for every story are linked in the show notes. We'll be back tomorrow morning. Keep the lights on.