Has power grid been hacked? U.S. won't say

By Steve Holland and Randall Mikkelsen

WASHINGTON (Reuters) - U.S. concerns about the potential for cyber-attacks on critical infrastructure extended to the American electrical power grid on Wednesday and experts pointed the finger anew at Chinese hackers, among others.

U.S. Homeland Security Secretary Janet Napolitano told reporters the power grid is vulnerable to potentially disabling computer attacks, while declining to comment on reports that an intrusion had taken place.

"The vulnerability is something that the Department of Homeland Security and the energy sector have known about for years," she said. "We acknowledge that ... in this world, in an increasingly cyber world, these are increasing risks."

Napolitano spoke after the Wall Street Journal reported that cyberspies had penetrated the U.S. electrical grid and left behind software programs that could be used to disrupt the system.

The Journal said the intruders have not sought to damage the power grid or other key infrastructure but could try during a crisis or war.

The United States for several years has accused the Chinese and Russians, among others, of using cyber-attacks to try to steal American trade secrets, military secrets and government secrets.

The Chinese have been particularly active, a former U.S. security official told Reuters.

"They are all over the place," said the official, who spoke on condition of anonymity. "They're getting into university systems, contractor systems, hacking government systems. There's no reason to think that the electrical system would be immune as well."

Eric Rosenbach, executive director for research at Harvard University's Kennedy School of Government's Belfer Center, said that if true, it showed that the Chinese and Russians are thinking strategically about how to either constrain the United States or inflict more damage if they ever felt they needed to do so.

'POTENTIAL WEAKNESS'

"I think that China recognizes if in a very strategic sense you want to ensure you have the ability to exploit another country's potential weakness or vulnerability but do it in a way that isn't confrontational or cause an international crisis, then this is a very good way of doing that," he said.

President Barack Obama, aware of the concerns about the vulnerability of infrastructure, has launched a cyber review that is expected to be completed in the coming weeks.

"The president takes the issue of cybersecurity very seriously, which is why he ordered a top-to-bottom review shortly after taking office," said White House spokesman Nick Shapiro.

He said the White House was not aware of "any disruptions to the power grid caused by deliberate cyber-activity here in the United States."

"The Department of Homeland Security works with industry to identify vulnerabilities and to help industry enhance the security of control system networks. The federal government is also working to ensure that security is built in as we develop the next generation of 'smart grid' networks," Shapiro said.