Infrastructure Risk &
Intelligence Analysis

New York Legislature Passes First-in-Nation Statewide Data Center Moratorium; Measure Heads to Hochul

The New York State Legislature passed the Responsible Data Center Development Act (S.10462 / A.11560) as it adjourned its session, sending Governor Hochul a one-year statewide moratorium on new permits for hyperscale facilities exceeding 20 MW peak load, bundled with mandatory environmental impact review, dedicated electricity and water rate classes, and labor conditions. The measure is sponsored by Senator Kristen Gonzalez and Assemblymember Didi Barrett and was amplified by Earthjustice and 60-plus memos of support, marking the migration of data center opposition from town boards to a statewide statutory instrument — a template peer Northeast and Mid-Atlantic legislatures are likely to test next session. We assess moderate-to-high probability of signature given political momentum, though Hochul has not committed and an industry-led veto campaign should be expected. Operational impact on near-term New York site acquisition and interconnection is significant: above-threshold projects face at minimum a one-year stall plus higher entitlement costs from the new review and rate-class regime. Operators with pending applications should accelerate defensible pre-moratorium filings, pressure-test the 20 MW trigger against phased designs, and weight siting toward jurisdictions without active legislative moratoria.

Industry Reports 340% Surge in Perimeter Breach Attempts at Major Data Center Campuses

A threat intelligence consortium representing 47 Tier III and IV facilities across Northern Virginia, Dallas, and Phoenix has documented a significant escalation in physical perimeter intrusion attempts over the trailing 90 days — from fence-line probing to coordinated multi-point access attempts during shift transitions. Attribution analysis suggests a mix of industrial espionage actors and organized criminal groups assessing vulnerabilities ahead of high-value infrastructure attacks. Current perimeter hardening standards at most facilities were designed for opportunistic intrusion, not coordinated adversarial probing. Operators relying on contract security firms without dedicated intelligence functions are assessed as most exposed.

Indiana Residents Win Injunction on 400MW Data Center — Judge Cites Incomplete Environmental Review

A Hendricks County Circuit Court judge granted a preliminary injunction halting site preparation for a planned 400MW hyperscale facility after a coalition of residents demonstrated that the approved environmental impact statement excluded analysis of construction-phase groundwater drawdown affecting a shared agricultural aquifer. The operator had proceeded to grading under a permits-in-progress interpretation that the court rejected. This case represents the third successful injunction in 2026 arising from procedural gaps in data center environmental review, suggesting a coordinated legal strategy by opposition groups who have shared counsel and filed nearly identical motions in Indiana, Ohio, and Georgia. Operators in pre-construction phases should conduct legal vulnerability audits against this emerging litigation template before ground is broken.

Organized Opposition Coalition Forms Across Three Texas SMR Sites — Coordinated PR Strategy Identified

Intelligence derived from public filings, social media analysis, and county meeting records indicates a coordinated campaign by a network of agricultural and environmental advocacy groups opposing three separate small nuclear reactor proposals in rural Texas. The groups share a common PR firm, use near-identical legal arguments, and have cross-posted materials suggesting centralized message coordination rather than independent community opposition. This pattern mirrors successful campaigns that halted projects in Vermont (2019) and Illinois (2023). The presence of professional coordination does not delegitimize the concerns raised — it does mean operators should expect sophisticated, sustained opposition with multi-front tactics including regulatory intervention, local political mobilization, and media strategy, not just public comment submissions. Proactive community engagement now is substantially cheaper than reactive crisis management at permit stage.