Cybersecurity Lessons from Spain & Portugal's Blackout

28th April 2025 | Blogs

One minute you're sitting at your desk, replying to emails, sorting out invoices, just another regular Monday. The next? Darkness. Silence. Phones dead. Internet gone. That's exactly what happened to businesses across Spain and Portugal during the massive power outage that hit today.

Now, while investigators are still figuring out exactly what went wrong, a lot of fingers are pointing at a possible cyberattack. And even if it wasn’t this time, it could easily be next time. 


Why Cyberattacks Love a Power Outage?

During a blackout, businesses aren’t just fighting to keep the lights on. They're fighting to keep their digital doors locked. Hackers know that when systems crash and backup processes are rushed or missing, security gaps open up like trapdoors. It’s like the perfect storm: panic, confusion, and weakened defences. During a major power outage:

  • Firewalls can fail if backup power isn't sorted properly.
  • Security updates get missed while teams scramble just to stay online.
  • People get careless, clicking dodgy links because “we just need to get this back up!”
  • Monitoring tools go blind, so attacks go unnoticed for longer.

And cybercriminals love an easy target.


The Real-World Risk for Businesses

If you think this only happens to giant corporations, think again. SMEs are often the ones hit hardest because they don't have huge teams sitting in a room monitoring threats 24/7.

Picture it: your customer data exposed, your invoices held ransom, your operations frozen not just by a blackout, but by ransomware planted while you were busy trying to turn the WiFi back on. It’s happening more and more, every time the grid stumbles.

As an MSP, Here's the Straight Talk: You Need a Cyber Plan for Blackouts

If you're a business owner reading this, here’s the uncomfortable truth: hoping it won’t happen to you is not a plan. Working with a good Managed Service Provider (MSP) gives you the safety net you need when things go wrong.

At Workflo Solutions, for example, when we talk about "cyber resilience", we mean:

  • Backup internet connections and redundant systems that stay online when the grid doesn't.
  • Offline backups of critical data, encrypted and ready to restore without paying a penny to hackers.
  • 24/7 monitoring even during blackouts, using systems that don’t rely purely on your main power line.
  • Emergency incident response plans, so your team isn’t left fumbling in the dark, literally or digitally.

Cybersecurity during a blackout is like having a torch when you’re trapped in a cave. Without it, you're feeling your way blind, vulnerable to every hidden danger. With it, you see the threats coming before they reach you. Protecting your business from cyberattacks isn't just an IT thing anymore. It's a survival thing.