Yeah the utilities area is downright scary. Usually run on thin margins, really old specialists that are rapidly retiring, no IT budget to speak of, and most mission critical tech is 20+ years old, off the shelf from companies long dead, and loosely networked by people who’s objective was “make it work”, not security or resilience.

The only way out- electrical companies basically HAVE to become public like all the other utilities, and funding, wages, job training, and modernization for all utilities needs to be prioritized massively.

Of course, there’s lots of political reasons for idiots to fight against all this, so it won’t happen until the worst already has.