Acoem has announced that a major North American utility company is utilising its ATD Gunshot Detection system to bolster the security of critical infrastructure across multiple sites in the region.
This development comes amid a concerning trend of gunfire incidents targeting electrical substations and other energy assets in the United States. Such attacks, whether intentional or accidental, can severely damage equipment like transformers, potentially leading to extended power outages.
Increasing risks to critical infrastructure
Recent events have shown that some power and natural gas utilities have experienced significant disruptions
The Department of Homeland Security's recent threat assessment highlights that both domestic and international extremists continue to pose a risk to critical infrastructure.
Recent events have shown that some power and natural gas utilities have experienced significant disruptions due to gunfire incidents, affecting tens of thousands of customers. In one tragic instance, a power outage led to the death of an individual reliant on life support equipment.
Enhancing detection capabilities
Recognising these risks, the utility company re-evaluated its security technologies. While traditional cameras are effective for visible issues, they often fail to detect less obvious damages, such as bullet holes.
The company required a rapid detection system capable of alerting operators before incidents could lead to further complications.
Detecting threats beyond physical barriers
The utility must a system that could accurately name threats from afar and merge seamlessly with its VMS
Gunfire often occurs from considerable distances, making it hard to detect using conventional perimeter-based systems.
The utility needed a system that could accurately pinpoint threats from afar and integrate seamlessly with its video management systems (VMS) and security cameras.
On-premises system for enhanced cybersecurity
Cybersecurity constraints were a crucial factor, as the utility's strict "air-gapped" network policy prohibits internet connections within its operational systems. Any security solution had to operate on-site to prevent exposing operations to online threats.
After comprehensive testing, Acoem’s ATD system was selected, due in part to its ability to process detection data directly on the device, delivering immediate alerts without the need for external servers.
Integrated solutions and strategic implementation
The ATD system integrates with existing VMS infrastructure, providing video and audio verification
The ATD system integrates with existing VMS infrastructure, providing video and audio verification to help determine whether gunfire events are malicious.
This was crucial for the utility, as confirmed by its physical security program manager: "We needed immediate, accurate alerts to prevent catastrophic damage. Whether a threat is close-range or from a high-powered rifle fired from hundreds of feet away, we needed a modern, self-contained, highly accurate system to provide a full picture.”
Real-time situational awareness
When a gunshot is detected, the ATD system instructs PTZ cameras to focus on the origin of the sound, providing real-time visual confirmation. In some areas, thermal or infrared cameras complement the acoustic sensors to monitor areas not visible due to obstacles.
This combination allows for timely verification of alarms and coordination with law enforcement or maintenance teams if necessary.
Adapting to emerging security challenges
ATD system's flexibility, interoperability, and scalability have allowed the utility to expand its network
A recent incident involving hunters was quickly identified and assessed as non-threatening, thanks to the system's capabilities, allowing for rapid decision-making without unnecessary law enforcement involvement.
The ATD system's flexibility, interoperability, and scalability have allowed the utility to expand its security network from initial high-risk sites to a broader implementation without redesigning infrastructure.
Compliance and future directions
The CIP-014 standard from the North American Electric Reliability Corporation mandates physical security measures, a requirement met and exceeded by the utility's new systems. By integrating Acoem's acoustic threat detection into its operations, the utility not only complies with regulations but also sets new benchmarks for infrastructure resilience.
As highlighted by the utility’s program manager, “Securing the grid now demands both digital and physical vigilance. Gunshot detection has become a critical layer of defense for the infrastructure that powers our daily lives.” This strategic integration of edge-based AI and on-premises software ensures continuous service and safeguards community reliability.
Acoem, a pioneer in advanced physical security solutions, announced that a large North American utility is utilising its ATD Gunshot Detection system to protect critical infrastructure at multiple sites across the country.
Over the past few years, utilities across the United States have faced a troubling trend: gunfire directed at electrical substations and other energy assets. Whether the intent is vandalism, sabotage, or reckless target practice, the results are the same. A single rifle round can destroy a million-dollar transformer that could take months to replace. This happens when the cooling fluid drains from the transformer. Once the fluid is lost, the unit quickly overheats and frequently ignites.
Physical attacks on critical infrastructure
A recent DHS Homeland Threat Assessment concurs, stating, “We assess that domestic and foreign violent extremists will continue to call for physical attacks on critical infrastructure in furtherance of their ideological goals…”
One of the largest electric power and natural gas utilities in North America recognised this risk after a number of gunshot attacks on substations disrupted power to tens of thousands of customers. In one case, power was not restored for days, and a person dependent on life support equipment tragically lost their life.
The challenge
Before implementing a new solution, the utility needed to reassess how its security technologies worked together.
Traditional security cameras were excellent for documenting clearly visible problems, but they could not reliably detect something as small as a bullet hole in a damaged transformer, leaving a critical awareness gap. The company’s challenge was not only detecting a gunshot but doing it fast enough to act before cascading failures occurred.
Threats outside the perimeter
In many cases, gunfire at substations originates from hundreds of feet outside the fence line. The sound of the muzzle blast may never reach the site, leaving only the supersonic ballistic wave as evidence of incoming rounds.
A system limited to triangulating muzzle blasts within a perimeter would miss these long-range threats entirely.
Integration with security cameras and VMS
Facing these unique requirements, the utility sought a technology that could provide instant notification with video and audio verification. This capability was essential to confirm whether an event was malicious or accidental. Integration with the utilities existing video management system (VMS) was a requirement, while direct control of a pan-tilt-zoom (PTZ) camera would allow operators to focus immediately on the source of the gunfire and determine if an actual threat existed.
"We needed immediate, accurate alerts to prevent catastrophic damage,” said the utility’s physical security program manager. “Whether a threat is close-range or from a high-powered rifle fired from hundreds of feet away, we needed a modern, self-contained, highly accurate system to provide a full picture.”
The requirement of a closed, secure network
Cybersecurity was another defining requirement for this utility. The company prohibits internet connectivity within its operational network, a strict “air-gapped” policy that rules out any cloud-based system.
For these secure environments, any new security technology must operate entirely on-premises, integrating directly with existing video and access control platforms.
Finding the correct solution
To address the complex nature of the threats and meet these stringent demands, the utility required a specialised solution that avoided a full infrastructure overhaul. After extensive testing, the utility selected Acoem’s ATD (Acoustic Threat Detection) system. The company has now deployed numerous detection systems across multiple states and regions, with new installations continuing every week as part of an ongoing modernisation plan.
A principal reason behind choosing the Acoem ATD system was based on how the system works compared to legacy solutions. Instead of sending audio data from multiple sensors to a remote server, the Acoem sensor processes detection right on the device. When a gunshot occurs, it detects both the muzzle blast and the ballistic wave, confirming the event and calculating its location instantly.
Cybersecurity requirements of restricted internet access
Processing analytics on the edge is instant and gives operators the time they need to respond. That might mean rerouting power, isolating a substation, or taking a transformer offline before it fails. Having that situational awareness can make the difference between a quick repair and an extended regional outage.
Acoem developed an on-premises version of its Cadence software specifically to meet the utility’s cybersecurity requirements of restricted internet access. The platform displays live maps, sensor health, and provides audio verification clips that allow operators to hear what the sensor heard while viewing the shooter’s position overlaid on the map. Cadence integrates directly with the utility’s Avigilon video management system.
“Running software on-premises was non-negotiable,” said the utility’s program manager. “We needed the benefits of automation and analytics without exposing operational systems to the internet.”
Situational awareness with eyes on target
Detection is only half the story. Integration with a PTZ camera on site provides immediate visual confirmation. When a gunshot is detected, the sensor automatically commands the camera to pivot to the coordinates of the source. Operators can see what happened as it happens, even if the shooter is several hundred yards outside the fence line.
In some locations, thermal or infrared cameras may complement the acoustic sensors to detect movement in tree lines or along rights-of-way. This pairing of acoustic and visual intelligence transforms response operations, allowing the utility security team to verify alarms in real time and coordinate with law enforcement or maintenance crews as needed.
Hunters or vandals?
In one recent example, the utility’s Acoem ATD system detected gunfire at a remote substation.
Through the linked PTZ camera, operators quickly confirmed that the shots came from hunters outside the perimeter and that there was no threat to equipment or personnel. The team was able to assess the situation instantly without dispatching crews or contacting law enforcement.
Scalability and integration flexibility
The utility required open standards and interoperability. They did not want a proprietary system that locked them into a specific platform. The Acoem ATD system met that demand, integrating through APIs with their existing Avigilon infrastructure. Whether a site runs on VMSs such as Avigilon, Milestone, or Genetec, the ATD sensors connect seamlessly within the same ecosystem.
Just as important, the solution had to scale. The utility began with a few high-risk sites and has expanded steadily without redesigning its network. This “start small, grow fast” approach aligns with how the organisation evaluates, validates, and then standardises new technologies.
CIP-014 compliance and beyond
The North American Electric Reliability Corporation’s CIP-014 standard mandates physical security measures for critical transmission substations, including threat detection.
The utility wanted to go further. It set a new benchmark for awareness, resilience, and uptime. Acoustic threat detection is now a key component of its operational strategy, providing actionable intelligence that prevents damage rather than documenting it after the fact.
A smarter path forward
Protecting critical infrastructure today means recognising that not every threat is digital. A single bullet can cause as much disruption as a cyberattack. The key is giving operators the real-time data they need to act quickly and decisively.
By combining edge-based AI, on-premises software, and open integration with existing security systems, Acoem’s ATD system has given the utility company the situational awareness it needed to protect its assets and its customers. The system keeps vital equipment online, strengthens compliance, and helps safeguard the communities that rely on uninterrupted service.
“Securing the grid now demands both digital and physical vigilance,” said the utility’s program manager. “Gunshot detection has become a critical layer of defense for the infrastructure that powers our daily lives.”
