Cyberattack Preparedness: What to Stockpile When Infrastructure Fails
Cyberattack preparedness has become one of the most relevant forms of emergency preparedness for modern households. The 2021 Colonial Pipeline ransomware attack caused fuel shortages across the southeastern United States within days. The 2015 Ukraine power grid attack left 230,000 people without electricity. The 2016 Maersk attack disrupted global shipping for weeks. These weren’t military conflicts: they were targeted cyberattacks that cascaded into real-world supply chain failures that affected millions of ordinary people.
The good news: cyberattack preparedness is almost identical to general emergency preparedness. The same food, water, power, and communications supplies that protect you from natural disasters also protect you from infrastructure failures caused by cyberattacks. The key differences are in financial preparedness and communications independence.
What Infrastructure Fails in a Major Cyberattack
The DHS identifies 16 critical infrastructure sectors in the US, nearly all of which have significant cyber vulnerabilities. In a major infrastructure cyberattack, the most likely cascade failures are:
- Power grid: Electricity generation, transmission, and distribution systems are interconnected and increasingly software-controlled. Grid disruption is the highest-impact infrastructure attack. See our EMP Preparedness Guide: grid-down prep is identical.
- Banking and financial systems: ATMs go offline; credit card processing fails; bank branch operations are disrupted; wire transfers halt. Cash becomes the only functioning payment method.
- Water treatment systems: SCADA (Supervisory Control and Data Acquisition) systems controlling water treatment are known targets. The 2021 Oldsmar, Florida attack showed a hacker attempting to increase sodium hydroxide in water supply to lethal levels.
- Fuel distribution: Colonial Pipeline showed that fuel supply chains can collapse within days of a cyberattack on pipeline management systems.
- Internet and telecommunications: BGP routing attacks, DNS hijacking, or attacks on major internet exchange points can degrade or disrupt internet connectivity across regions.
- Healthcare systems: Hospital ransomware attacks (increasingly common) disrupt electronic medical records, prescription systems, and medical device management.
Power Grid Preparedness
A grid-down cyberattack scenario requires the same preparation as any extended power outage:
- Portable power station (1,000Wh+): Jackery 1000, EcoFlow Delta 2
- 100–200W solar panel: indefinite recharging without grid
- Propane generator as backup
- LED lanterns + headlamps for all household members
- Propane camp stove + 20 fuel canisters
- Indoor-safe propane heater + CO detector
Water System Preparedness
A cyberattack on water treatment infrastructure could contaminate municipal water or simply take it offline:
- 30-day stored water supply (2 gal/person/day) in sealed containers
- Gravity water filter (Big Berkey): purifies any water source
- Water purification tablets: backup for filtered water
- WaterBOB bathtub bladder: emergency fill before supply disruption
- Monitor local water safety advisories via NOAA radio
Financial System Preparedness
This is the most cyber-specific preparedness area and the one most people ignore:
- Cash reserve ($500–$2,000 in small bills): ATMs and payment systems go down fast; cash is the only universally accepted payment in infrastructure failure
- Multiple bank accounts at different institutions: A single-bank ransomware attack or failure shouldn’t wipe out all your liquidity
- Printed account numbers, routing numbers, and insurance policy numbers: Digital access may be unavailable
- Physical credit/debit cards: Some older payment terminals process cards offline; have cards from multiple networks (Visa, Mastercard)
- Precious metals (small quantity): Gold/silver coins have barter value if paper currency system is disrupted for extended periods
- Offline copies of tax returns and financial records: On USB drives stored securely at home
Communications Preparedness
Internet and cell network disruptions are a primary cyberattack vector:
- Hand-crank NOAA weather radio: Government emergency broadcasts when internet is down
- Ham radio (licensed): Peer-to-peer communication when cell and internet infrastructure fails
- FRS/GMRS two-way radios: Local family and community communication
- Printed address book: Phone numbers stored only in cloud-synced phones are inaccessible without internet
- Satellite communicator (Garmin inReach): Works when all terrestrial networks fail
- Offline digital content: Download maps (Maps.me), first aid guides, and reference materials to phone storage: accessible without internet
Food Supply Chain Preparedness
Supermarkets carry approximately 3 days of inventory. Fuel supply disruptions from infrastructure attacks can halt resupply within a week:
- 30-day food supply per person (see our 1-Month Emergency Kit guide)
- Manual can opener × 2
- Camp stove for cooking without grid
- Manual tools for food preparation
Digital Security Preparedness
Beyond physical preparedness, cyberattack scenarios include personal digital security:
- Offline backups: External hard drive with all important documents, photos, and files: kept disconnected from internet
- Password manager with local backup: Use a password manager that can export encrypted local copies
- Two-factor authentication on all financial accounts
- Identity theft monitoring service: Infrastructure breaches often include personal data; early alert is valuable
- Freeze your credit: Free at all three bureaus; prevents identity theft account opening even if your data is compromised
Recommended Products
EcoFlow Delta 2 Portable Power Station (1,024Wh)
Grid failure is the highest-impact cyberattack scenario. The EcoFlow Delta 2 is one of the best-value large power stations: 1,024Wh with AC, USB-C, USB-A, and 12V outputs, recharges in 1 hour from AC or via solar panel. In a cyberattack grid-down scenario, this paired with a 220W solar panel gives you indefinite power for devices, lighting, and medical equipment. The LFP battery lasts 3,000+ charge cycles.
- 1,024Wh LFP battery: 3,000+ charge cycles
- 2,400W AC output: runs most appliances
- 1-hour AC recharge; solar-compatible
SentrySafe SFW123GDC Fireproof Safe
Your cash reserve, physical account documents, and printed backup data need secure, fireproof storage. A cyberattack scenario that escalates to civil unrest makes home security more critical. The SentrySafe SFW123GDC is ETL-verified fireproof at 1,200°F for 1 hour and UL-classified waterproof: protecting your documents and cash even in severe home emergency scenarios. Large enough for documents, USB drives, cash, and small valuables.
- ETL-verified 1-hour fire protection at 1,200°F
- UL-classified waterproof
- Digital keypad + key override
Garmin inReach Mini 2 Satellite Communicator
When internet and cell networks are down: as they would be in a major cyberattack on telecom infrastructure: satellite communication still works. The Garmin inReach Mini 2 connects to the Iridium satellite network (100% global coverage), allows two-way messaging and SOS activation, and has a 14-day battery life on tracking mode. At $350 + monthly subscription, it’s the most expensive item on this list: but also the most resilient when everything else fails.
- Iridium satellite network: 100% global coverage
- Two-way text messaging + SOS with live tracking
- 14-day battery; works when all terrestrial networks fail
Cyberattack Preparedness FAQ
How likely is a major cyberattack on US infrastructure?
According to the Cybersecurity and Infrastructure Security Agency (CISA), US critical infrastructure faces thousands of cyberattack attempts daily. Several have succeeded in causing real-world disruption: Colonial Pipeline (2021), SolarWinds (2020), and multiple healthcare systems. CISA’s 2026 threat assessment identifies nation-state adversaries as actively pre-positioning within US infrastructure for potential disruption. The question is not if, but when a sufficiently severe attack occurs.
How long would a major cyberattack on the power grid last?
It depends heavily on the scale and sophistication. The 2015 Ukraine attack caused outages lasting 1–6 hours. A sophisticated, coordinated attack targeting transformer infrastructure (as EMP preparedness guides discuss) could cause multi-week outages: replacement transformers take months to manufacture and are in limited supply. NERC (North American Electric Reliability Corporation) and CISA plan for 1-to-several week outage scenarios in their preparedness exercises. Prepare for 2–4 weeks minimum.
Should I use cryptocurrency as a hedge against banking system failure?
Cryptocurrency requires internet access to transact: making it useless in the exact scenario where banking systems have failed due to internet infrastructure attack. Cash is far more practical for cyberattack scenarios. If you want non-government-dependent store of value for extreme long-term scenarios, physical precious metals (gold/silver coins) are more practical than digital assets in an internet-down environment.