Rising Threats to U.S. Critical Infrastructure in 2026: Why Oil, Gas, Electric, and Transportation Facilities Are in the Crosshairs – And How to Prepare

In an era of heightened geopolitical tension, U.S. critical infrastructure—particularly oil and gas facilities, electric grids, pipelines, ports, and transportation hubs—faces escalating risks. Just days ago, on March 27, 2026, a bomb threat forced the evacuation of approximately 4,500 construction workers at the Golden Triangle Polymers petrochemical plant in Orange County, Texas (Southeast Texas or SETX region). The site, a joint venture between Chevron Phillips Chemical and QatarEnergy, was thoroughly searched by the Orange County Sheriff’s Office; no explosive device was found. Nearby Chevron Phillips facilities and even a local high school were placed on lockdown as a precaution.

Incidents like this are not isolated. In Cameron Parish, Louisiana—one of the nation’s busiest LNG hubs—a natural gas pipeline owned by Delfin LNG exploded in early February 2026 near Holly Beach, injuring a worker and highlighting the vulnerability of energy infrastructure in high-consequence areas. While under investigation, the event underscores how even routine operations at these sites can intersect with broader threat environments.

Adding to the urgency in the same region, just today (March 29, 2026), a bomb threat was reported at Venture Global’s CP2 construction site in Cameron Parish. The threat targeted the new construction site for the massive CP2 LNG terminal project—not the main operating facility. Venture Global immediately established a safety perimeter per protocol. No shelter-in-place order was issued, no roads were closed, and the Cameron Parish Sheriff’s Office confirmed that Louisiana State Police hazmat and bomb squads were dispatched to investigate. This remains a developing situation.

These events serve as a wake-up call. At Contingency Training, we help organizations turn awareness into action. This article examines why these threats are rising, the specific incidents making headlines, the evolving nature of the risks (including the growing drone threat), and—most importantly—practical steps facility operators can take to strengthen security and resilience.

Why These Threats Exist: Geopolitical Drivers Fueling Domestic Risks

The root causes trace directly to international conflicts in which the United States is deeply involved.

• Russia-Ukraine Conflict: For years, Russia has weaponized energy infrastructure, launching repeated missile and drone strikes on Ukrainian power plants, grids, and gas facilities. This sets a dangerous precedent: state actors and their proxies view critical energy assets as legitimate targets in hybrid warfare. U.S. support for Ukraine places American facilities in the crosshairs of potential retaliation or copycat tactics by aligned actors.

• Israel-Iran Tensions and U.S. Involvement: The escalation since late February 2026 has been dramatic. U.S. and Israeli strikes on Iranian military and energy-related targets prompted Iranian retaliation against Gulf energy infrastructure, threats to close the Strait of Hormuz, and explicit warnings of attacks on U.S. and allied facilities. Iran has vowed to target energy, water, and IT infrastructure linked to the U.S. and Israel if its own assets are hit further. In direct response, the Department of Homeland Security (DHS) and intelligence community issued urgent warnings to U.S. energy companies in early March 2026 to “beef up security” against possible Iranian retaliation—both kinetic and cyber.

  
  

These conflicts create ripple effects: state-sponsored hackers, proxy militias, and ideologically motivated individuals (domestic or foreign) may view U.S. oil refineries, LNG terminals, electric substations, pipelines, and ports as soft targets capable of inflicting economic pain and political leverage. The result? A surge in threats that blend foreign influence with domestic execution.

Recent U.S. Incidents Highlighting the Risk

Beyond SETX and Cameron Parish, threats are materializing nationwide:

• Oil & Gas / Petrochemical: The Golden Triangle Polymers threat disrupted a multi-billion-dollar project critical to polyethylene production. Similar patterns have appeared at other Gulf Coast LNG and refinery sites, including today’s incident at Venture Global CP2.

• Electric Grid: Substations remain highly vulnerable to physical sabotage (e.g., gunfire, explosives) or drone incursions. Recent plots and actual attacks demonstrate how quickly localized damage can cascade into regional blackouts.

• Transportation & Ports: Major ports handle vast energy shipments; disruptions here ripple through supply chains. Pipelines, rails, and truck terminals are equally at risk from sabotage or insider compromise.

  
  

These are not hypothetical. DHS alerts explicitly flag energy infrastructure as a priority concern amid the current Middle East conflict.

The Evolving Threat Landscape: From External to Insider (and the Rising Drone Threat)

Modern threats are diverse, sophisticated, and often layered:

• External / Physical Attacks: Bomb threats (real or hoax) cause immediate operational halts, evacuations, and economic loss—even when no device is found.

• Drones (UAS): Affordable commercial or modified drones enable surveillance, contraband delivery, or kinetic attacks on remote or hard-to-reach assets like pipelines and substations. Detection and countermeasure technology is now essential.

  A specific and concerning development: In November 2025, four advanced Skydio X10D military-grade drone systems were stolen from a locked storage area at Fort Campbell, Kentucky (home of the 101st Airborne Division). The small quadcopters, equipped only with cameras for intelligence, surveillance, and reconnaissance, were taken in a targeted theft by two individuals who had authorized access to the base. The U.S. Army Criminal Investigation Division identified suspects and is offering a $5,000 reward, stating there is “no threat to the public.” However, in the current climate of heightened Iranian retaliation warnings and surging drone incursions over U.S. military and critical sites, this incident raises serious questions. Advanced military drones in the wrong hands could be repurposed for persistent surveillance of energy facilities, mapping vulnerabilities, or even delivering payloads in a coordinated attack—amplifying the asymmetric threat to oil, gas, electric, and transportation infrastructure.

• Sleeper Cells & Coordinated Actors: Foreign operatives or ideologically aligned groups may embed long-term to strike at the right moment.

• Lone Wolf / Inspired Attackers: Individuals radicalized online by conflict propaganda can act with minimal support—using vehicles, firearms, or simple explosives.

• Insider / Lone Wolf Workers: Disgruntled employees, contractors, or radicalized insiders have unique access. Recent cases involve insiders plotting sabotage against transformers or control systems.

• Cyber Threats: State actors (Iran, Russia, China) target operational technology (OT) and industrial control systems (ICS). Ransomware or destructive malware can shut down facilities remotely.

  
  

Hybrid attacks—combining physical disruption with cyber elements—amplify impact and complicate response.

Bolstering Security and Awareness: Practical Steps Forward

Preparation is the best defense. Facilities cannot rely solely on law enforcement or federal agencies; proactive, layered security is required.

1. Conduct Comprehensive Risk Assessments: Update vulnerability analyses to reflect current geopolitical realities, focusing on high-consequence assets (HCAs) in oil/gas, electric, and transportation sectors.

2. Enhance Physical Security: Strengthen perimeters, implement strict access control (badging, visitor management), deploy 24/7 surveillance with AI analytics, and install anti-drone systems where appropriate—especially in light of the stolen military drones.

3. Implement Robust Insider Threat Programs: Background vetting, behavioral reporting, and monitoring of privileged access to sensitive systems.

4. Develop Drone Detection & Mitigation Plans: Follow CISA and FAA guidance; integrate technology with policy and training to counter both commercial and potentially repurposed military UAS threats.

5. Strengthen Cybersecurity for OT/ICS: Segment networks, apply patches promptly, monitor for anomalies, and conduct regular penetration testing.

6. Train and Empower Your Workforce:

   • “See Something, Say Something” awareness programs.

   • Bomb threat recognition and response protocols.

   • Active threat, active shooter, and evacuation drills.

   • HAZMAT and emergency response training tailored to facility-specific hazards.

7. Build Emergency Response & Continuity Plans: Develop all-hazards plans, coordinate with local law enforcement, fire departments, and fusion centers. Conduct regular tabletop exercises and full-scale drills.

8. Foster Partnerships: Share intelligence with DHS, CISA, FBI, and industry peers. Public-private collaboration is critical.

Recommendations from Contingency Training

At Contingency Training (contingencytraining.com), we specialize in turning these recommendations into reality. Our customized programs include:

• HAZWOPER and HAZMAT Emergency Response Technician training—critical for facilities handling chemicals or facing potential sabotage releases.

• Using Sygnal simulated gas monitoring system (sygnalapp.com) for HAZMAT, Confined space, and Emergency drills for a hands-on scenario-based drills that simulate real threats like spills, releases and process upsets.

• Crisis management and leadership training for supervisors and security teams.

• Tailored security awareness and insider threat workshops.

• Workplace Safety and Emergency Care for when emergencies do happen.

  
  

We recommend every facility in high-risk sectors immediately:

• Schedule a no-obligation consultation.

• Run a tabletop exercise focused on emergencies and process upsets.

• Certify key personnel in emergency response and threat recognition.

Vigilance Today Prevents Crisis Tomorrow

The bomb threats at Golden Triangle Polymers, Venture Global CP2, and the Cameron Parish pipeline incident are reminders that threats to U.S. critical infrastructure are no longer abstract—they are here. Geopolitical conflicts abroad are driving real risks at home, and emerging vulnerabilities like stolen military drones only heighten the urgency.

The good news? With the right training, planning, and awareness, these facilities can deter threats, minimize impact, and protect workers, communities, and the economy.

Ready to strengthen your organization’s preparedness? Visit contingencytraining.com or contact us today to discuss customized training solutions that fit your unique risks. Our experienced instructors deliver practical, hands-on programs that build the skills your team needs when seconds count.

Training for the unknown. Train with Contingency Training.