Utility Security: Copper Thieves Are Targeting Power Substations. Drone Patrols Are Shutting It Down

3 days ago
8 min read

It takes an organized crew under an hour to strip the copper from a remote power substation. They arrive after dark, cut the fence in a low-visibility corner, and work fast. By the time anyone notices — the next morning, or when the grid fault shows up in a monitoring system — they're long gone. The copper is already at a scrap yard. The damage is already done.

U.S. utilities lose nearly $920 million every year to copper theft. The FBI has designated copper theft from electrical substations as one of the most significant threats to U.S. critical infrastructure. And the problem isn't getting smaller. Copper prices hit record highs in 2025 following new tariff announcements, metal theft surged 77% across industries, and organized crews are working more professionally and more aggressively than ever before.

The title of a recent industry report says it plainly: "Substation Security Cameras Are Everywhere. Copper Thieves Don't Care."

That's the utility security problem in a sentence. The standard response to substation theft has been more cameras. Cameras document what happened. They don't stop it from happening. And for facilities that sit miles from the nearest populated area, by the time anyone responds to what the cameras recorded, the site has already been stripped.

Drone patrols work differently. Here's why.

Utility Security's Copper Theft Problem Is Accelerating

The scale of copper theft targeting utility infrastructure has reached a point where most major utilities treat it as a line-item operational cost rather than an exceptional incident. That framing understates the actual damage.

AT&T alone reported more than 10,400 copper theft incidents in 2025, averaging over 200 incidents per week nationally. Their losses topped $82 million for the year, with California alone accounting for more than $54 million in damage. That's one company, one industry segment. The Department of Energy's broader estimate puts copper theft losses to American businesses and utilities at over $1 billion annually.

The threat is getting more organized, not less. NERC's E-ISAC 2025 report documented more than 3,500 physical security breaches at power grid facilities in a single year, roughly a tenfold increase from a decade ago. About 3% of those breaches actually disrupted electricity delivery — but the ones that didn't still cost the utility in equipment replacement, repair crews, overtime, and insurance claims.

The economics driving the problem are straightforward. Copper is trading near record highs. The material inside a substation represents significant value by weight. Scrap markets, while nominally regulated, remain accessible enough for organized groups to move material quickly. And the typical substation offers minimal resistance: remote location, infrequent staffing, predictable camera positions, and a response time measured in tens of minutes at best.

These aren't opportunistic criminals grabbing wire on impulse. They're organized groups running calculated operations, scouting sites in advance, identifying the highest-value targets, and executing quickly enough to be gone before any response arrives.

Why Substations Are the Perfect Target

To understand why utility security is so difficult to get right on substations, you have to understand what makes substations different from most industrial facilities.

They're remote by design. Substations exist where the grid needs them, not where population density makes security staffing economical. A transmission substation serving a rural region might sit on a county road with no neighbors within a mile. The nearest security response, whether police or private patrol, could be fifteen to thirty minutes away under the best conditions.

They're largely unstaffed outside maintenance windows. Modern substations are monitored remotely, with grid operators watching system telemetry from a central control center. Physical presence is intermittent. A well-organized theft crew can observe a site for a week, map the staffing pattern, and confirm there are hours where no one will set foot on the property.

They hold enormous material value in a relatively small footprint. The copper in a single medium-sized substation — busbars, grounding systems, control wiring, transformer connections — can run into the tens of thousands of dollars at scrap value. For an organized crew, one successful hit can fund a significant operation.

And critically, they're vulnerable to rapid damage. Copper theft at a substation isn't just a material loss. It can mean prolonged outages for the customers the facility serves. A stripped grounding system doesn't just need to be replaced. It needs to be engineered, procured, and commissioned before the substation can safely return to service. Downtime that runs days instead of hours is not uncommon following a serious theft event.

Cameras Are Everywhere. Copper Thieves Don't Care.

The utility industry invested heavily in camera infrastructure over the past decade, and the theft rate went up anyway. That's not a failure of effort. It's a failure of model.

Cameras document. They don't deter. An organized crew that has scouted a site knows where the cameras are. They know the camera positions, the field of view, and more importantly, the fact that nobody is watching the footage in real time in the middle of the night. A camera that records a theft and alerts a monitoring system at 2am triggers a response that arrives forty-five minutes after the crew has finished and left.

The security camera model was designed around the assumption that documented evidence prevents crime through prosecution risk. At substations, that risk calculation doesn't hold. Scrap metal is difficult to trace. Recovery rates are low. Prosecution is complex. The threat of a camera on a pole is simply not a meaningful deterrent to an organized group that has already done the math.

What deters a professional crew is the prospect of an active response while they're still on site. A drone that launches within thirty seconds of a perimeter alert, arrives at the breach point in under a minute, activates lights and audio, and streams live video to an operator who is simultaneously contacting law enforcement — that changes the risk calculation in a way a camera simply doesn't.

Visibility is not the same as response. The utility security model that closes the gap is one where detection and response happen together, not sequentially.

Drone hovers above a construction site with crane and scaffolded building under a colorful pink-orange sunset sky

What Drone Patrols Actually Do Differently

Autonomous drone security addresses the two failures that define substation vulnerability: coverage gaps and response speed.

On coverage: a drone-in-a-box system deployed at or near a substation can patrol the full perimeter on a continuous overnight schedule, covering every fence line and every access point with thermal imaging that works in complete darkness. There are no blind spots from fixed camera angles. There are no gaps created by vegetation, equipment, or terrain. The patrol route adapts to the site's actual geometry, not to where poles can be mounted.

Thermal imaging is particularly critical in a utility environment. Copper stripping operations happen at night, and darkness is the crew's primary advantage against fixed cameras. Against thermal-equipped drones, darkness provides no cover. Body heat, vehicle heat, and the heat signatures of power tools are all visible in thermal imagery regardless of ambient light.

On response: when a perimeter sensor or motion detector triggers an alert, a drone is airborne within seconds. It arrives on scene while the situation is still active. A remote operator watching live thermal and HD video can assess whether there's an intrusion in progress, activate drone-mounted lights and audio deterrents, and have law enforcement en route with a live feed before a traditional response unit would have even received the call.

That response window is what breaks the copper theft model. Organized crews operate on a timetable. They've calculated how long they have before any response arrives, and they work within that window. Shrink the response window to under two minutes and the operation stops being viable. The crew doesn't get arrested, they just leave. And over time, sites with fast aerial response stop being targeted at all.

Beyond Copper: The Broader Utility Security Threat

Copper theft is the most frequent threat to substation security, but it isn't the only one. The same remote, underprotected profile that makes substations attractive to theft crews also makes them attractive to more serious threat actors.

Physical attacks on the power grid have increased tenfold over the past decade. In February 2026, a vehicle was intentionally driven through the perimeter fence of a substation in Boulder City, Nevada. In late 2024, a Tennessee man was arrested for attempting to arm a drone with explosives and attack a Nashville substation. In 2022 and 2023, a California engineer was convicted of bombing electrical transformers, receiving a ten-year sentence in December 2025.

NERC's analysis identifies physical attack as an escalating concern for grid resilience, and CISA has published guidance specifically on electrical substation physical security in response to the increasing incident rate.

The drone security model addresses this threat spectrum too. A persistent aerial presence with thermal detection and alarm response capability doesn't just catch copper thieves. It detects vehicle intrusions, unauthorized personnel approaching critical equipment, and anomalies that indicate a more serious threat before damage occurs. Counter-drone capability, monitoring the airspace above the substation for unauthorized aircraft, adds a layer that addresses the weaponized drone threat directly.

The converging threat profile means utility security teams are being asked to defend against a wider range of scenarios than ever before, with the same budget constraints and the same remote geography that has always made substation security difficult.

What Managed Drone Security Looks Like for a Utility

The operational model for managed drone security at utility substations follows the same framework as any large remote facility, with adjustments for the specific geography and threat environment.

LandSkyAI's VirtualGuard program begins with a site assessment that maps the substation's layout, identifies the highest-risk access points, and designs patrol routes that cover the full perimeter and critical equipment zones. Because substations are often remote, LandSkyAI deploys the LandSky Node, a self-contained infrastructure unit with its own satellite or cellular connectivity, so the program operates independently of any existing site communication infrastructure. Substations that have never had reliable connectivity for a security system can run full drone operations through the Node.

Once live, patrols run every night on a randomized schedule. Alarm-triggered dispatch puts a drone on scene in under a minute when any perimeter alert fires. Every mission is monitored by a certified FAA Part 107 operator at a remote operations center, with live thermal and HD video, incident documentation, and direct law enforcement escalation capability when the situation warrants it.

The economics compare favorably to the alternative. A single full-time security guard post costs more than $300,000 per year, covers one location, and still can't match the response speed of an airborne drone. For utilities managing dozens or hundreds of remote substations, the managed drone model scales in ways that ground-based staffing never can. Coverage across multiple substations, managed by a remote operations team, at a cost structure that reflects the efficiency of aerial operations.

Copper theft doesn't stop because substations are hard to find. It stops because the sites that get targeted become sites where the operation fails more often than it succeeds. Managed drone security is how utility teams shift that probability.

LandSkyAI deploys managed drone security programs for utility infrastructure, substations, and critical energy facilities. Our VirtualGuard platform provides 24/7 aerial patrols, thermal detection, and immediate alarm response across remote sites. Contact us to schedule a site assessment.

What do you think is the hardest part of securing remote utility infrastructure?

No staff on-site after hours
Too much ground to cover
Slow law enforcement response

MissionControl banner with glowing digital map and drone icons, reading Live Drone Missions. Real-World Security in Action.

Did you find this article useful? Are you interested in seeing us in action?

MissionControl is LandSkyAI’s ongoing town hall style webinar where you can get to know who we are, what we do, and how we’ve built our autonomous security programs. We also conduct a fully live remote drone demo, every time!

Our next event is on Wednesday, June 24th 2026

Thank you for reading SkyBlog! Found it interesting? Hit that link 🔗 button and send to a friend! If you have questions or want to explore how these solutions apply to your environment, contact the LandSkyAI team below to start a conversation. ✌️