jain.com — data centers, connectivity and security, analyzed daily

Author: Deepak Jain

  • NVIDIA’s Reported $50B Lease Is Really a $19.6B Bet on Powered AI Capacity

    NVIDIA’s Reported $50B Lease Is Really a $19.6B Bet on Powered AI Capacity

    TL;DR · 30-second read

    The Short Version

    NVIDIA, the company whose chips run most artificial intelligence, has reportedly agreed to rent a huge computer campus in Texas from a firm called Hut 8. NVIDIA has not confirmed it.

    The deal is described as worth $50 billion, but only $19.6 billion is locked in for the first 15 years. The rest depends on renewals after that.

    What is really being rented is electricity: a guaranteed grid connection roughly equal to what one large nuclear reactor produces. For artificial intelligence, that has become as important to secure as the chips themselves.

    Data Center Frontier reported on August 3, 2026 that NVIDIA has emerged as the tenant behind Hut 8’s lease commitments at its one-gigawatt Beacon Point AI data center campus in Nueces County, Texas. Hut 8 has disclosed two 15-year leases covering 704 megawatts of IT capacity with a combined base-term value of $19.6 billion. That figure rises to as much as $50.2 billion if all renewal options are exercised. The Financial Times identified NVIDIA as the tenant. Reuters said it could not independently verify that, and NVIDIA neither confirmed nor denied its role, saying only that it works with ecosystem partners to deploy AI infrastructure through its DSX AI factory architecture.

    In a separate announcement, Aalo Atomics and Crusoe said they will partner on a nuclear-powered AI data center. They plan to demonstrate it at Idaho National Laboratory in 2027 and then deploy 50-megawatt Aalo Pod reactors at Crusoe data centers by the end of 2029.

    Executive Summary

    Hut 8 has fully commercialized Beacon Point with two 352-megawatt phases, each carrying a base-term contract value of about $9.8 billion. The campus runs on a one-gigawatt interconnection agreement with AEP Texas and is being designed around NVIDIA’s DSX reference architecture. If the reported tenant is confirmed, NVIDIA would move beyond supplying GPUs and become an anchor tenant whose credit helps make a multibillion-dollar campus financeable.

    The headline number overstates what is firm. Only $19.6 billion of the $50.2 billion is committed. The remaining $30.6 billion depends on renewals beyond the initial 15 years. What the firm commitment secures is 704 megawatts of capacity that is already power-connected, and in the current AI buildout that is the scarcest input.

    The Aalo–Crusoe partnership takes the opposite approach to the same constraint. Instead of locking up a gigawatt of grid power, it aims to manufacture both a small reactor and a modular data center and to add them 50 megawatts at a time. Beacon Point itself is grid-connected, not nuclear-powered.

    Most of the $50 Billion Sits in Renewal Options

    The $50.2 billion figure is a ceiling, not a check. Hut 8 has disclosed two 15-year leases with a combined base-term contract value of $19.6 billion, about $9.8 billion for each 352-megawatt phase. The remaining $30.6 billion, roughly 61 percent of the headline, materializes only if every renewal option beyond the initial terms is exercised.

    The firm commitment is still very large. Spread evenly, $19.6 billion over 15 years comes to about $1.3 billion a year, or roughly $1.9 million per megawatt of IT capacity annually. That is a simple average and not a rent schedule, because payment start dates and escalators have not been published.

    Whether the renewals happen depends on something no one can promise today: that a campus designed in 2026 will still be competitive decades from now. Computing systems turn over rapidly, while the land, the shell and the grid connection last far longer. Power density and cooling will need repeated upgrades to keep the site useful. The base term prices the next 15 years of AI demand, and the option value prices how long the power connection itself stays valuable.

    What the Lease Actually Buys Is Powered Capacity

    Set aside the headline value, and the scarce asset at Beacon Point is electricity that has already been promised. The campus holds one gigawatt of utility capacity under an interconnection agreement with AEP Texas. An interconnection agreement is the utility contract that lets a large load plug into the grid, and obtaining one has become as important as obtaining GPUs. The two leases commit 704 megawatts of IT capacity, meaning the power delivered to servers, networking and storage. The gap between that figure and the 1 GW connection typically covers cooling and electrical overhead.

    Hut 8’s own disclosure shows which variable is fixed. The company said it redesigned the first Beacon Point data hall around NVIDIA’s architecture and increased capacity by 57 percent within the same land and utility footprint. The grid connection did not grow. What changed was how much compute the design could extract from it. NVIDIA pitches DSX on the same logic, emphasizing token performance per megawatt (AI output per unit of power) rather than floor space.

    The parties most affected are those who cannot secure this kind of power allocation on their own. Some reporting has speculated that NVIDIA could sublease capacity. If it does, smaller GPU cloud providers, often called neoclouds, would gain access to power and space they could not finance independently. For Hut 8, the leases bring its contracted AI portfolio to 949 megawatts on 1,330 megawatts of utility capacity, with $26.6 billion of aggregate base-term value. Beacon Point accounts for roughly three-quarters of that value.

    A Chip Supplier’s Credit Becomes Construction Finance

    If the Financial Times identification holds, the bigger shift is NVIDIA’s role in the market. Campuses at this scale are typically financed against the creditworthiness of the tenant, and Hut 8 has described its counterparty as investment-grade. An NVIDIA lease would make the company an anchor tenant whose balance sheet helps get a multibillion-dollar campus built. It would no longer be only the supplier of the GPUs, networking, systems and software inside.

    The strategic logic is clear. A supplier that underwrites capacity can pull forward projects that might otherwise stall on financing. It can also standardize those projects around its own reference design and widen the pool of customers able to rent its hardware. The open question, which only NVIDIA can answer, is how much of the demand behind such a campus comes from end customers and how much is the supplier’s own commitment. A lease anchored by the chip vendor and sublet to the vendor’s customers concentrates risk around a single forecast of compute demand. That is the tradeoff the model accepts in exchange for speed.

    The Other Model: Putting the Reactor Next to the Racks

    The nuclear model in this news cycle comes from Aalo Atomics and Crusoe, not from Beacon Point. The two companies plan to run a Crusoe Spark modular data center on power from an Aalo reactor at Idaho National Laboratory in 2027. They then intend to deploy Aalo Pods, which are 50-megawatt-electric nuclear plants, at Crusoe data centers by the end of 2029. Crusoe puts its Spark factory lease, buildout and initial module fleet at more than $200 million. Aalo has secured more than $136 million in funding.

    The milestone so far should be read precisely. On July 4, 2026, Aalo’s Critical Test Reactor reached criticality, meaning it sustained a nuclear chain reaction. It did so at zero power, before sodium coolant or any electricity-generating systems were added. The 10-megawatt-electric Aalo-X power reactor is being built next door. Commercial sites will still require regulatory approval, fuel, waste-management plans, insurance, financing and community support. For that reason, 2027 and 2029 are better read as ambitious targets than as delivery dates.

    Side by side, the two projects answer the same constraint in opposite ways. Beacon Point locks up a gigawatt of grid power and fills it in 352-megawatt blocks. Aalo and Crusoe aim to manufacture both the power plant and the data center and to add capacity 50 megawatts at a time. In both cases, securing power comes first in the contract.

    Background

    Hut 8 built its business in bitcoin mining and has been repositioning toward AI data center development, leasing power-connected capacity to large tenants under long-term contracts. Its Beacon Point campus in Nueces County, Texas, is now fully contracted and sits within a 949-megawatt contracted AI portfolio supported by 1,330 megawatts of utility capacity. NVIDIA supplies the GPUs, networking, systems and software that many AI data centers run on. It promotes DSX as a reference architecture for designing entire facilities around its platforms.

    Crusoe is an AI cloud and data center company that sells computing through Crusoe Cloud and builds prefabricated Spark data center modules. Aalo Atomics is developing small advanced reactors, including the 10-megawatt-electric Aalo-X, a sodium-cooled design, and the 50-megawatt-electric Aalo Pod. The company is expanding toward a one-million-square-foot manufacturing operation, and its planned demonstration with Crusoe is sited at Idaho National Laboratory.

    Sources

    Source: NVIDIA’s Reported $50B Lease and the Nuclear-Powered AI Factory: Data Center Frontier’s August 3, 2026 analysis of Hut 8’s Beacon Point leases and the Aalo–Crusoe nuclear data center partnership.

  • $520M Triple-A Data Center ABS Shows AI-Era Capital Rewards Leased, Finished Sites

    $520M Triple-A Data Center ABS Shows AI-Era Capital Rewards Leased, Finished Sites

    TL;DR · 30-second read

    The Short Version

    A company called Cloud Capital raised $520 million by selling bonds that are paid back from the rent on one huge data center in Northern Virginia. A data center is a building full of computers, and a major technology company leases this one long-term. It uses 80 megawatts of power, roughly what tens of thousands of homes use.

    Three separate credit-rating firms gave the bonds their highest possible grade, a first for this kind of deal.

    The takeaway: lenders now see a finished, already-rented data center as one of the safest things to lend against. The cheapest money goes to buildings that are done.

    Cloud Capital has completed a $520 million asset-backed securities issuance through its newly established Cloud Capital ABS Master Trust, Pulse 2.0 reported on August 2, 2026. The notes were issued as a single A-2-I tranche. They are backed by an 80-megawatt hyperscale data center in Northern Virginia that is leased long-term to an investment-grade hyperscale customer. Fitch Ratings, Morningstar DBRS and Kroll Bond Rating Agency each rated the notes AAA, which the company says is a first for a data center ABS.

    Guggenheim Securities was sole structuring advisor and sole active bookrunner. Deutsche Bank Securities and Morgan Stanley were passive bookrunners. Net proceeds will support the expansion of Cloud Capital’s Core Strategy, a joint venture backed by Realty Income and a major global institutional investor.

    Executive Summary

    Cloud Capital has turned the rent from a single leased hyperscale data center into $520 million of top-rated bonds. It has also set up a master trust that lets it repeat the process with other buildings. The company says the deal is the first data center ABS to earn AAA from three independent agencies. It also says the deal matched the tightest spread for the asset class since the Middle East conflict began in 2026.

    The significance is less about one building than about who gets cheap money in the AI-era buildout. Triple-A pricing is available to capacity that is already finished and contracted. The construction, power and leasing risk that defines a new project stays with equity investors and construction lenders. That makes an executed hyperscale lease a financing asset in its own right. It also gives owners of stabilized portfolios a lower-cost way to recycle capital into their next acquisitions.

    Key details remain undisclosed, including the notes’ pricing, the tenant’s identity and the lease term. Those are the figures investors would need to judge how large a cost-of-capital advantage the structure really delivers.

    Why Three Agencies Reached Triple-A

    An asset-backed security, or ABS, is a bond repaid from a specific pool of cash flows rather than from a company’s general balance sheet. Here the pool is the rent from one building: an 80-megawatt hyperscale data center in Northern Virginia. The company says it is leased long-term to an investment-grade hyperscale customer. Hyperscalers are the handful of cloud and internet giants that run computing at enormous scale, and their own debt typically carries strong credit ratings. Fitch Ratings, Morningstar DBRS and Kroll Bond Rating Agency each assigned the notes their top grade, which Cloud Capital says makes this the first data center ABS rated AAA by three independent agencies.

    The company attributes the rating to “a conservative capital structure, long-term contracted revenue and stabilized infrastructure assets.” Contracted revenue means the rent is fixed by a lease rather than dependent on finding tenants. Stabilized means construction is finished and the tenant is in place and paying. A conservative structure generally means the bonds are sized well below the asset’s value, which leaves a cushion before bondholders are exposed to any loss. Taken together, the credit case rests heavily on the tenant’s obligation to pay, with the building securing that promise.

    Two-Speed Financing: Finished Capacity Borrows Cheaply

    The deal shows that triple-A money becomes available only after the hardest risks have been retired. A data center’s riskiest years come before it earns any rent. In that period the developer must secure land and grid power, build out electrical and cooling systems, and sign a tenant. None of that risk sits inside this transaction. The collateral is an operating, fully contracted building. That is why it could be rated at the top of the scale. It is also why, by the company’s account, it priced at a spread matching the tightest for data center ABS since the Middle East conflict began in 2026. A spread is the extra yield investors demand over a benchmark rate, and a tighter spread means cheaper borrowing.

    This matters for the AI-era buildout. Demand for hyperscale capacity, driven in large part by AI alongside conventional cloud computing, is pushing developers to build at record pace. Yet the cheapest long-term money in this market reaches a project only after it has been built and leased. Until then, construction and lease-up are funded with equity and construction financing, which cost more. Once a site stabilizes, an owner like Cloud Capital can refinance it through a vehicle like this one and redeploy the proceeds. The release says net proceeds will support expansion of the company’s Core Strategy. The lowest cost of capital therefore goes to whoever holds the finished, leased building.

    That has practical consequences. It favors owners with large stabilized portfolios; Cloud Capital says it has acquired 30 data center properties worth more than $12 billion since 2020. It raises the value of a signed hyperscale lease, because the lease is what unlocks the lowest-cost financing. It also deepens a market in which third-party owners supply hyperscale capacity funded by bond investors rather than by the tenant’s own balance sheet. One transaction does not establish a market-wide shift, but its structure makes the mechanism explicit.

    A Master Trust Built for Repeat Issuance

    The structure matters as much as the rating. A master trust is a single legal vehicle that can issue multiple series of notes over time against a growing pool of assets, so the owner does not need a new structure for every deal. Cloud Capital says this is its second ABS master trust. It describes it as the first programmatic data center ABS master trust established for a core joint venture. That venture is its Core Joint Venture Strategy, backed by Realty Income, the publicly traded net-lease real estate investment trust, and an unnamed major global institutional investor.

    Jason Weaver, Cloud Capital’s head of capital markets, described the goal as a “repeatable financing platform” that diversifies funding and positions the company to “finance future growth at an increasingly competitive cost of capital.” The ambition is coherent, but its payoff depends on what comes next. The cost-of-capital benefit becomes demonstrable only if later series price as well as this one. It also requires more stabilized buildings to be added to the pool.

    Reading the Claims Carefully

    Several of the headline claims are relative rather than absolute. The spread claim compares this deal only with data center ABS priced since the Middle East conflict began, and no spread, coupon or maturity was disclosed. The “strong demand from a broad group of institutional investors” was not quantified with an order-book size or an oversubscription multiple. Guggenheim’s Matt Bissonette described the deal as “a new benchmark.” That assessment comes from the deal’s structuring advisor and lead bookrunner.

    The collateral is also concentrated in one building, one tenant and one market. Triple-A ratings on a single-asset deal signal strong confidence in that tenant and lease. They also mean the notes’ performance depends on a single counterparty and on the long-term economics of Northern Virginia. It is the world’s largest data center market, and access to new grid power there has become a widely discussed constraint on growth. That constraint bears more on new development than on an operating, leased facility, but investors will weigh it when they assess renewal risk at the end of the lease.

    Background

    Cloud Capital was founded by Hossein Fateh, who previously co-founded DuPont Fabros Technology, a wholesale data center developer acquired by Digital Realty in 2017. The company says it has acquired 30 data center properties worldwide since 2020, with a combined value of more than $12 billion. Its Core Strategy centres on stabilized hyperscale facilities and is run through a joint venture backed by Realty Income and a major global institutional investor.

    Data center asset-backed securities emerged in the late 2010s. Owners wanted long-term financing tied directly to leased facilities rather than to corporate balance sheets. Northern Virginia is the largest data center market in the world and hosts much of the capacity rented by the major cloud providers.

    Sources

    Source: Cloud Capital Completes $520 Million Triple-A-Rated Data Center ABS Issuance (Pulse 2.0, August 2, 2026): Cloud Capital’s $520 million AAA-rated ABS, backed by an 80-megawatt Northern Virginia hyperscale data center.

  • At $130-145bn Capex, Meta’s AI Data Centers Start to Look Like a Cloud Business

    At $130-145bn Capex, Meta’s AI Data Centers Start to Look Like a Cloud Business

    TL;DR · 30-second read

    The Short Version

    Meta, the company behind Facebook and Instagram, now expects to spend between $130 billion and $145 billion this year. The cost of the huge computer buildings that power artificial intelligence keeps climbing. This is the second time this year Meta has raised that figure.

    The bill is biting. In the latest three months, the cash Meta had left after all its spending shrank to $784 million, from $8.5 billion a year earlier. Its shares fell about 10 percent.

    The twist: other companies are offering to pay Meta more than it paid for its computing power. Meta may start renting that power out.

    Meta has raised its 2026 capital expenditure guidance to between $130bn and $145bn, DatacenterDynamics reported on August 2, 2026. The range had been $115bn–$135bn at the start of the year and $125bn–$145bn in April. The increase comes as AI data center costs rise. In the same week, Amazon lifted its own capex guidance by $20bn and cited the cost of memory for AI servers.

    Meta shares fell around 10 percent. Quarterly free cash flow dropped to $784m, its lowest level in five years, compared with $8.5bn a year earlier. Revenue rose 28 percent to $61bn and profit fell 14 percent to $6bn. Meta again confirmed its interest in becoming a cloud provider. It recently hired AWS cloud lead David Brown, and it is reportedly in early talks to rent compute to Anthropic in a deal that could be worth as much as $10bn.

    Executive Summary

    Meta now expects to spend $130bn to $145bn this year on capital projects, the long-lived assets such as AI servers, data center buildings and the electrical and cooling systems that support them. This is the second upward revision of 2026. The midpoint of the range has risen from $125bn at the start of the year to $137.5bn. The latest step lifts the bottom of the range and leaves the $145bn ceiling set in April unchanged.

    The spending is now visibly squeezing Meta’s cash generation. Free cash flow of $784m for the quarter was a fraction of the $8.5bn Meta generated a year earlier, and the stock fell around 10 percent. Amazon’s shares rose after its own capex increase. The difference shows that investors distinguish between AI spending that feeds an existing cloud business and AI spending whose return is still prospective.

    The bigger strategic signal is Mark Zuckerberg’s remark that Meta is receiving offers for its compute “at a significant premium over what we paid for it.” Three things point the same way: that remark, a senior cloud hire from AWS, and reported talks with Anthropic. Together they suggest Meta’s AI fleet may become a product it sells as well as a cost it carries. That would matter for AI developers hunting for capacity, for incumbent clouds, and for the suppliers who build and power data centers.

    The Raise Lands at the Floor, Not the Ceiling

    Meta’s new range of $130bn to $145bn is its second upward revision of 2026. The year opened at $115bn–$135bn, and April’s update moved it to $125bn–$145bn. This time the top of the range held at $145bn and the bottom rose by $5bn. Since the start of the year, the midpoint has climbed from $125bn to $137.5bn, an increase of $12.5bn or 10 percent. The latest step, however, is a narrowing. Meta is signalling that it is less likely to land at the low end. It is not signalling that it has found room to go higher.

    The increase comes as AI data center costs rise. In the same week, Amazon raised its guidance by $20bn and pointed specifically to the price of memory for AI servers. That context matters for how the number is read. Capital expenditure can rise because a company is building more. It can also rise because each unit it builds costs more. Meta has not said how its increase splits between the two. Amazon’s explanation is a reminder that at least part of the industry’s recent guidance creep reflects price rather than volume.

    Why Meta’s Data Centers Start to Look Like a Cloud Business

    The most consequential line from the earnings call was not the capex figure. It was Zuckerberg’s observation that Meta is “getting a lot of offers for compute at a significant premium over what we paid for it.” Compute here means the processing capacity of Meta’s AI server fleet. If outside buyers will pay more than Meta’s cost for that capacity, every server Meta installs has two possible uses. It can train and run Meta’s own models, or it can be rented to someone else at a margin. That shifts the capex line from pure cost toward something closer to inventory.

    Meta has taken steps consistent with acting on that. It again confirmed its interest in becoming a cloud provider, it recently hired AWS cloud lead David Brown, and it is reportedly in early talks to rent compute to Anthropic. That deal could be worth as much as $10bn. For scale, $10bn is roughly 7 percent of the low end of this year’s capex range. That is meaningful, but a single deal of that size would not by itself change the investment case, and the talks are described as early.

    The effects would reach both sides of the market. AI developers that cannot secure enough capacity from established clouds would gain another large supplier. Incumbent cloud providers would face a competitor whose capacity was financed by an advertising business rather than by cloud customers. Data center developers and equipment vendors could find Meta’s demand extending beyond what its own apps require. None of this is settled. Running a cloud business requires customer contracts, service-level commitments, support and sales functions that Meta has not historically built. The direction, though, is visible in what the company has said and done.

    Why Investors Treated Meta and Amazon Differently

    Amazon raised its guidance and its shares jumped. Meta raised its guidance and its shares fell around 10 percent. The cash figures help explain the gap. Free cash flow is the cash left after operating costs and capital spending. Meta’s was $784m for the quarter, its lowest level in five years, against $8.5bn a year earlier. Revenue grew 28 percent to $61bn, but profit fell 14 percent to $6bn, so costs are growing faster than sales.

    One reasonable reading of the split reaction is about visibility. Amazon’s spending feeds a business that already sells computing capacity to customers, so investors can see where the return comes from. Meta’s spending serves its own products, and much of the payoff depends on AI products that Zuckerberg described as “coming.” Meta’s third-quarter revenue forecast of $61bn to $64bn has a midpoint of $62.5bn, below the $63.1bn Wall Street expected, so it offered little near-term offset. Renting out capacity is one way Meta could make the return on its data centers easier to see. That is another reason the cloud ambition and the capex number belong in the same story.

    What the Spending Means Down the Supply Chain

    For suppliers of power, cooling and construction, guidance at this level signals sustained demand from one of the largest private buyers of data center infrastructure. For a transformer maker or a cooling vendor, though, the useful question is not the dollar total. It is how many megawatts of capacity the money buys, on what timetable, and where. Meta has not broken that out. And if more of each dollar is going to pricier components such as memory, then $137.5bn buys less physical build-out than the same sum would have a year ago.

    A cloud push would add another layer. Capacity built for external customers generally has to meet those customers’ expectations for reliability and connectivity. It could also extend Meta’s need for sites, power and cooling beyond its internal requirements. Until Meta says how much capacity it intends to offer to others, suppliers can plan only against the capex range.

    Background

    Meta Platforms, founded by Mark Zuckerberg as Facebook, owns Facebook, Instagram and WhatsApp. It is one of a handful of “hyperscalers,” companies that design and operate their own data centers at enormous scale. Unlike Amazon Web Services, Microsoft Azure or Google Cloud, Meta has historically built that capacity only for its own apps and advertising systems. It has not rented it to outside customers.

    The race to build artificial intelligence has changed the scale of that spending. Training and running large AI models requires dense clusters of specialized servers, along with the electricity, cooling and networking to support them. That has made capex guidance from Meta, Amazon and their peers one of the most closely watched demand signals for chipmakers, memory suppliers, data center developers and utilities.

    Sources

    Source: Meta boosts AI data center capex, forecasts $130-145bn spend — DatacenterDynamics on Meta’s raised 2026 capital expenditure guidance, second-quarter results and cloud ambitions.

  • Hyperscale Data’s 20 MW AI Contract Still Needs Bitcoin to Get Built

    Hyperscale Data’s 20 MW AI Contract Still Needs Bitcoin to Get Built

    TL;DR · 30-second read

    The Short Version

    A small company building a data center for artificial intelligence in Michigan is paying for it partly by selling bitcoin.

    Hyperscale Data sold about 100 bitcoin and set up a loan that uses its remaining coins as a guarantee, at roughly 4.5% to 5% interest. The building already has a customer lined up, under a deal that could bring in more than $1.2 billion over 20 years.

    The surprise is that a signed customer does not pay for construction. The money has to be found first.

    Hyperscale Data, Inc. (NYSE American: GPUS) said on July 30, 2026 that it has sold approximately 100 bitcoin and put the proceeds directly into its Michigan AI data center campus. It has also set up a credit facility that lets it borrow at variable rates, expected at about 4.5% to 5.0%, with bitcoin pledged as collateral.

    The money will fund construction and long-lead equipment for a previously announced master services agreement with an unnamed neocloud customer. That agreement covers about 20 megawatts of critical AI compute capacity for an initial 10-year term. The company says it could exceed $1.2 billion in revenue if the customer exercises two five-year extensions, and $3.0 billion if the customer also takes an optional 32 additional megawatts.

    Executive Summary

    Hyperscale Data is turning part of its bitcoin treasury into data center capacity. It is doing this in two ways: selling some coins outright and borrowing against the rest. Management calls the Michigan campus one of its highest-priority long-term investments. It presents the plan as a way to avoid issuing new shares at what Executive Chairman Milton “Todd” Ault III calls the company’s current market valuations.

    The announcement matters beyond one small-cap company because of what it shows about how AI infrastructure gets funded. Hyperscale Data already has a signed long-term customer, yet it still reached for its most liquid asset to pay for construction. The company says the alternatives were dilutive equity or “onerous” debt. A contract with a customer and the capital to build for that customer are separate problems, and the second one sets the pace.

    The trade-off is real. Borrowing against bitcoin is cheap only while bitcoin holds its value. The company has not disclosed the facility’s size, terms or collateral requirements, the campus’s total budget, or a delivery date.

    A Signed AI Customer Is Not a Construction Budget

    The master services agreement at the center of this plan is substantial on paper. It covers about 20 megawatts of critical AI compute capacity, meaning the power delivered to the computing equipment itself, excluding cooling and other overhead. The initial term is 10 years, and the customer may choose to add two five-year extensions. The contract reaches the “in excess of $1.2 billion” the company cites only if both extensions are exercised. Spread across 20 years and 20 megawatts, that is roughly $3 million per megawatt per year, or about $250 per kilowatt per month.

    That revenue arrives only after the capacity is built and handed over. Before then, the landlord has to pay for the building, the electrical and cooling plant, and what the release calls “long-lead equipment.” These are items such as large transformers and switchgear that typically must be ordered well in advance. Hyperscale Data says proceeds from the roughly 100 bitcoin it sold are being invested “directly” into this work, and that the credit facility will help fund it further.

    The telling detail is how the company describes its alternatives. It says the bitcoin route reduces reliance on “third party short-term equity financing or onerous debt financing.” Ault says that at current valuations, bitcoin is a more attractive source of capital than issuing stock. A neocloud is a cloud provider that specializes in renting out GPU computing for AI. Having signed one as a customer had not, by itself, made construction money cheap enough for management. The company has not said whether it sought project debt secured by the contract itself. For smaller developers the operational lesson is that the customer queue and the capital queue are separate. The company’s own word for what the new funding does is “accelerate,” which means the capital queue is what sets the build schedule.

    Why Bitcoin Became the Cheaper Money

    The credit facility carries variable rates expected at about 4.5% to 5.0%, secured by pledged bitcoin. For comparison, the company’s listed 13.00% Series D Cumulative Redeemable Perpetual Preferred Stock pays holders 13% a year. Against that benchmark, and against selling common shares at a valuation management considers unattractive, borrowing against an asset already on the balance sheet looks inexpensive.

    Lenders accept bitcoin as collateral because it trades around the clock in deep markets and can be sold quickly if a loan goes bad. That lets them lend on terms closer to secured lending than to speculative construction debt. The company keeps most of its coins and their potential upside. Ault calls the treasury, which the company recently said had reached approximately $71 million in bitcoin, “a significant source of financial flexibility.” Chief Executive Officer William Horne describes the move as “shifting one balance sheet asset for another.”

    That description is accurate as far as it goes. The company is converting a liquid, volatile asset into an illiquid, long-lived one that is meant to produce contracted cash flow. Whether the exchange creates value depends on the build cost, the delivery date and whether the customer exercises its extensions. The release quantifies none of these.

    Volatile Collateral Behind a Long-Lived Asset

    Bitcoin-backed loans typically advance only a fraction of the collateral’s market value. They usually require the borrower to post more collateral or repay if the price falls far enough. Hyperscale Data has not stated the facility’s size, lender, loan-to-value ratio or margin terms, so the scale of that exposure cannot be measured. The structural mismatch is clear, though. A data center takes years to pay back, while the collateral behind its funding is repriced every minute.

    The variable rate adds a second moving part. The 4.5% to 5.0% range is an expectation, not a fixed cost. Rising rates would increase the cost of carrying debt that funds an asset whose revenue is locked into a long-term contract. Neither risk is unusual alone. Together, they are what investors should weigh against the stated benefit of avoiding dilution.

    Why Speed Carries a Premium

    The contract gives the customer a right to 32 additional megawatts. If that right is exercised within the first two years and the contract runs through both extensions, the company expects total revenue above $3.0 billion across about 52 megawatts. That is roughly the same per-megawatt economics as the base deal. Because the expansion window is limited in time, any delay on the first 20 megawatts shortens the period in which the larger deal can materialize. That is a concrete reason to pay for speed with the most readily available capital.

    The company is also narrowing its focus. It expects to divest Ault Capital Group, its private equity and operating-company arm, in the second quarter of 2027. What remains would own and operate data centers and hold digital assets. The Michigan campus is the asset that narrower company will be judged on, which helps explain why management ranks it at the top of its capital priorities.

    Background

    Hyperscale Data, Inc. trades on NYSE American under the ticker GPUS and describes itself as an AI data center company anchored by bitcoin. Its subsidiary Sentinum owns and operates a data center where it mines digital assets and offers colocation and hosting. Its other subsidiary, Ault Capital Group, is a hybrid private equity firm and operating company with holdings in financial services, industrial, defense, hospitality and other sectors. The company expects to divest Ault Capital Group in the second quarter of 2027, leaving a business centered on data centers and digital assets.

    A number of public companies now hold bitcoin as a treasury asset, and some bitcoin miners have been repurposing power and sites for AI computing. AI workloads need dense electrical and cooling infrastructure, and specialized GPU cloud providers, often called neoclouds, increasingly lease that capacity from third-party landlords under long-term contracts.

    Sources

    Source: Hyperscale Data Repurposes Bitcoin Treasury Strategy to Accelerate Development of Michigan AI Data Center (PR Newswire, July 30, 2026): Hyperscale Data announces a bitcoin sale and a bitcoin-backed credit facility to fund its Michigan AI campus.

    Primary sources: Hyperscale Data Form 8-K (filed September 18, 2026); Exhibit 99.1: Hyperscale Data Declares Monthly Cash Dividend on 13.00% Series D and 10.00% Series E Preferred Stock (September 18, 2026).

  • Texas’s 260 MW Wind Ruling Shows AI Co-Location Is a Grid Deal, Not an Exit

    Texas’s 260 MW Wind Ruling Shows AI Co-Location Is a Grid Deal, Not an Exit

    TL;DR · 30-second read

    The Short Version

    Texas regulators approved a giant artificial intelligence computing center, essentially a warehouse full of computers, built right beside a wind farm. The catch: whenever the state’s power grid is in trouble, the center must shut off completely within 30 minutes, even if that means flipping its main breakers.

    The center uses roughly as much electricity as the wind farm produces, about what a small city draws. Its builders called the rule excessive. Regulators disagreed, because in an emergency the grid needs that wind power. The message to everyone else: building next to a power plant does not free you from the grid’s rules.

    The Public Utility Commission of Texas has approved a net metering arrangement for a 260 MW AI data center co-located with a wind farm of 265.5 MW, Utility Dive reported. Net metering here means the data center draws power directly from the adjacent generator, with only the difference between the two settled against the grid. The project is developed by Crusoe and will be operated by Ensign, the large-load customer. It is the second data center planned at the site, bringing combined load to about 525 MW.

    In an order dated July 23, 2026, the commission required the new facility to be able to curtail its full load within 30 minutes during grid emergencies, by physical breaker disconnection if necessary. It also barred the project from paid demand response programs tied to the arrangement. The commission rejected the developer’s argument that the second facility should be exempt from the curtailment conditions applied to the first.

    Executive Summary

    Texas has approved one of the first behind-the-meter AI data centers under SB 6, the 2025 state law that set new rules for large electricity users on the ERCOT grid and gave the grid operator authority to disconnect data centers during emergencies. Behind-the-meter means the load sits on the generator’s side of the grid connection and consumes its output directly. The approval lets the project proceed, but on terms that commissioners largely adopted from ERCOT’s proposed reliability conditions rather than writing a project-specific exception.

    Those terms matter well beyond one site. Because the commission chose a general framework over a bespoke deal, the order is likely to serve as a reference point for other co-located loads in Texas. They include a pending application from Amazon and Vistra for a data center campus beside the Comanche Peak nuclear plant southwest of Fort Worth.

    The practical takeaway for developers is that sitting next to a generator secures a power supply in normal conditions. It does not remove the load from the grid’s emergency claims. In a grid emergency, the wind farm’s output is treated as a grid resource, and the data center must be able to step aside quickly and without payment.

    Why the Commission Counted Both Buildings

    The heart of the dispute is simple arithmetic. The wind farm is rated at 265.5 MW. The first data center at the site accounts for roughly 265 MW, and the new one adds 260 MW, for a combined load of about 525 MW. Crusoe and Ensign argued that the first facility was already subject to curtailment and that the earlier reliability condition on the co-located wind project made further curtailment unnecessary. In their view, forcing the entire site offline was disproportionate.

    The commission saw the mechanism differently. If the first facility were curtailed during an emergency while the second stayed online, the second facility’s 260 MW could absorb nearly all of the wind farm’s 265.5 MW nameplate output on-site. Almost nothing would reach the grid at the moment the grid most needed it. Commissioners, adopting the administrative law judge’s recommendation with revisions from Chairman Thomas Gleeson, concluded that this would undermine the goal of keeping generation available to the grid during emergencies. That reasoning is what turns co-location from a private supply arrangement into a conditional deal with the grid: the load gets the generator’s output in ordinary hours, and the grid gets it back when reliability is at stake.

    This is the substance behind the headline. The order does not treat an adjacent wind farm as a private power plant that exits the data center from ERCOT’s reliability regime. The generator remains, in the commission’s framing, capacity the grid can call on. Any co-located load large enough to consume that capacity must be able to get out of the way.

    The 30-Minute Clock and the Backup-Power Question

    The operating requirements are specific. The data center must be able to shed its full load within 30 minutes, including by physically opening breakers. ERCOT should give 60 minutes’ advance notice when practicable, and the operator may voluntarily commit to a faster 10-minute response. This is more flexibility than traditional industrial loads have been asked to provide, and it reframes the ability to shut down rapidly as a condition of operating behind generation rather than an optional grid service.

    For an AI operator, disconnection means lost compute time unless something else carries the load. Chris Talley, co-founder of GridTracker, wrote after the decision that the order is not a “death blow” to co-location in ERCOT but that “this architecture now essentially requires full backup capacity.” He later clarified that he meant resources able to carry the load off-grid for a meaningful period, not just ride through a brief interruption, and he called this an “untested assumption.” That caveat is worth keeping. The order sets a curtailment obligation; it does not mandate backup generation. Whether operators respond by building on-site capacity, by accepting downtime, or by designing workloads that tolerate interruption is a commercial choice the ruling leaves open.

    What the ruling does settle is that the cost of staying online through an emergency now sits with the developer. For any co-location pitch built on the idea that an adjacent generator guarantees uninterrupted power, that is a material change in the assumptions.

    Emergency Duty Is Not a Paid Service

    The ban on paid demand response programs tied to the arrangement is the order’s quieter economic lever. Demand response programs typically pay large users to reduce consumption when the grid is stressed, and flexible loads can earn meaningful revenue from them. By prohibiting compensation here, the commission drew a line between mandatory emergency curtailment, which is a condition of the co-location arrangement, and voluntary grid services, which can be sold.

    The effect is to remove an offsetting revenue stream from the project’s economics. A developer cannot count the same flexibility twice: once as the price of permission to co-locate and again as a product sold back to the grid. For project finance models that assumed curtailment could be partly monetised, that assumption no longer holds under this framework.

    A Template Under SB 6, With Comanche Peak as the Next Test

    Because commissioners largely adopted ERCOT’s proposed conditions rather than negotiating a one-off exception, the order reads as a template for future behind-the-meter projects in Texas. Utility Dive has reported that Texas faces a large-load interconnection queue of 438 GW, so the rules governing how big loads connect, and how they behave in emergencies, affect a very large pipeline of proposed projects.

    Not every stakeholder agrees the template is sound. The Texas Competitive Power Advocates and natural gas producer BKV filed arguments that the framework could discourage future co-location. PUCT staff contended those parties lacked standing under the governing statute, and the final order did not address their arguments on the merits. Their concern therefore remains an open policy question rather than a resolved one. The next data point will likely be the Amazon and Vistra application at Comanche Peak, a co-location next to nuclear generation rather than wind. Talley said that how ERCOT and the commission treat that arrangement “will be very telling.”

    Background

    Texas runs most of its electricity through ERCOT, a grid largely separate from the rest of the US, and it has become a leading destination for large AI data centers because of available land and generation. That demand has pushed lawmakers and regulators to write rules specifically for very large loads. SB 6, enacted in 2025, set requirements for such loads and gave ERCOT authority to disconnect data centers during grid emergencies.

    Co-location, placing a data center directly beside a power plant, has attracted developers as a way to secure supply faster than a conventional grid connection allows. Regulators, however, have had to decide whether generation consumed on-site should still count toward the grid’s reliability during emergencies. The Crusoe and Ensign case is among the first to answer that question under SB 6.

    Sources

    Source: Texas approves AI data center co-location next to wind farm, with curtailment caveats. Utility Dive on the Public Utility Commission of Texas order approving a 260 MW co-located AI data center with emergency curtailment conditions.

  • Minnesota’s 30-Plus Water System Attack Shows Data Center Cooling Risk Starts Upstream

    Minnesota’s 30-Plus Water System Attack Shows Data Center Cooling Risk Starts Upstream

    TL;DR · 30-second read

    The Short Version

    A coordinated cyberattack hit more than 30 local public water systems in Minnesota this week. Federal investigators are now involved.

    The damage was small. One city’s well and treatment plant briefly shut down, and there are no signs the tap water became unsafe. Officials say early clues point to hackers linked to Iran, but that is not confirmed.

    Why it matters beyond Minnesota: the giant computer buildings behind apps and artificial intelligence often cool their machines with water from these same local utilities. A hack at the water plant is a risk to them too.

    A coordinated cyberattack affected more than 30 community water systems in Minnesota in the week of July 27, according to Minnesota IT Services, the state’s technology agency, Al Jazeera and Reuters reported on July 30. Local officials said the well and treatment plant in at least one city temporarily went offline, but the attack appears to have had minimal impact, and there are no indications the water supply became unsafe to drink. The FBI said on Wednesday that it was “actively engaged with victims.”

    State officials said the incidents resemble activity attributed to hackers aligned with Iran’s government, and cautioned that the assessment is preliminary. The New York Times, citing unnamed state and federal officials, reported that Iranian hackers were the likely culprits, while noting that attribution is not definitive and that the attackers may have posed as Tehran-aligned actors. The attack comes amid renewed US–Iran hostilities after a June memorandum of understanding that paused the fighting broke down this month.

    Executive Summary

    More than 30 local water systems in a single US state were hit in what state officials called a “coordinated cyberattack.” The physical consequences were limited: one city’s well and treatment plant briefly went offline, and drinking water was not reported unsafe. But the breadth of the event and the FBI’s involvement put the security of utilities’ operational technology (OT) — the industrial control systems that run pumps, wells and treatment processes — back at the top of the critical-infrastructure agenda.

    For the data center industry, the relevance is indirect but concrete. Many facilities that use evaporative cooling draw their water from municipal systems like these. The Minnesota incident is a reminder that a data center’s cooling supply depends not only on its own cybersecurity but on the cybersecurity of utilities it neither owns nor controls, and whose security resources are set by local public budgets rather than by the data center.

    No data center has been reported as affected, and attribution of the attack remains preliminary. The episode’s value for operators is as a live test of a common assumption: that water outages are local, physical events rather than coordinated ones spanning many utilities at once.

    The Cooling Risk Sits Outside the Fence

    Data centers that use cooling towers or other evaporative systems reject heat by evaporating water, which has to be continuously replaced — industry shorthand calls this “makeup water.” Where a campus draws that water from a municipal utility, the utility’s wells, pumps and treatment plant become part of the data center’s cooling chain. Those assets are run by OT: programmable controllers and supervisory software that start pumps, open valves and dose chemicals. An intrusion that reaches them is, for every large water customer downstream, a cooling-supply risk.

    Minnesota shows what that looks like in practice. More than 30 community water systems were affected in a single coordinated event, and in at least one city the well and treatment plant went temporarily offline — precisely the kind of interruption that stops water flowing to a large commercial customer. Water resilience planning has traditionally centered on familiar, local failures: a main break, a drought restriction, a fault at one plant. A coordinated intrusion is different in kind, because it can reach many independent systems at once, which may also affect neighboring utilities or backup supplies an operator expected to lean on.

    The exposure is not uniform. AI training and inference hardware concentrates far more heat per rack than conventional servers, pushing operators toward liquid cooling and larger heat-rejection systems. Closed-loop liquid cooling and air-cooled chillers consume little water; evaporative designs trade lower electricity use for continuous water dependence. The operators most exposed to an event like Minnesota’s are water-reliant sites on a single municipal feed with limited on-site storage. Nothing reported so far indicates that any data center served by the affected systems saw an interruption, and the outage that did occur was brief.

    Minimal Impact Is the Good News, Not the Whole Story

    The most important outcome is that drinking water was not reported unsafe and service disruption appears to have been limited. That is a credit to the utilities and responders involved, and it should temper any alarm.

    But officials’ own description points to a campaign rather than a one-off. Minnesota IT Services spokesperson Emily Zimmer said “the timing, methods of access, and targeted infrastructure share characteristics with other coordinated cyber incidents our federal partners have observed involving critical infrastructure.” Community water systems often run lean, with limited dedicated security staff, which makes a campaign that sweeps many of them at once hard to defend against one utility at a time.

    The number that matters for infrastructure planners is therefore the 30-plus, not the single outage. Breadth indicates that access was obtainable across many separate operators simultaneously. A contained result this time says more about where the attackers stopped than about how far they could have gone.

    Attribution Is Unsettled; the Threat Picture Is Not

    State officials said the incidents resemble those attributed to Iran-aligned hackers but called that assessment preliminary. Officials cited by The New York Times said Iranian hackers were the likely culprits, while acknowledging the conclusion could change and that the attackers may have impersonated Tehran-aligned groups to raise tensions. Former intelligence officials told the paper a false-flag operation was less likely. The fair reading is that the available indications point one way but are not conclusive, and no technical evidence has yet been published that would let outside analysts test either view.

    For defenders, final attribution matters less than the context. Water infrastructure has become a target across the current conflict: reported US strikes have hit Iranian water plants, and Iran has targeted desalination plants in neighboring Gulf states. Whoever is ultimately responsible for Minnesota, that backdrop raises the baseline risk to water-sector OT, and to every large customer that depends on it.

    What Operators Can Ask Their Water Utility

    Data center operators cannot secure a municipal utility’s control systems, but they can reduce how much a compromise of them would cost. Practical steps include confirming how and how quickly the utility will notify large customers of a cyber incident, knowing how many hours of cooling the site’s on-site water storage actually covers, qualifying alternative supplies such as reclaimed water or trucked delivery, and weighing low-water cooling designs for new builds.

    The relationship can run both ways. Large water customers have a direct stake in their utility’s security posture, and utilities facing coordinated campaigns have an interest in knowing which customers carry the highest consequences from an outage. Minnesota makes that conversation easier to start.

    Background

    Water utilities are among the more exposed parts of US critical infrastructure: many are small, locally run and operate industrial control systems designed for reliability rather than security. US agencies have previously linked attacks on water-sector equipment to Iran: in late 2023, intrusions into industrial controllers at several US water utilities, including the Municipal Water Authority of Aliquippa in Pennsylvania, were attributed to a group affiliated with Iran’s Islamic Revolutionary Guard Corps.

    Data centers become significant water users when they rely on evaporative cooling, which trades lower electricity use for continuous water consumption. As AI workloads raise heat density, cooling design, and the water supply behind it, has become a central siting and permitting question. The Minnesota incident arrives amid renewed US–Iran hostilities: the US joined Israel in a war against Iran on February 28, and a June memorandum of understanding that paused the fighting broke down in July.

    Sources

    Source: US authorities probe cyberattack on water systems in Minnesota – Al Jazeera — Al Jazeera and Reuters on a coordinated cyberattack affecting more than 30 Minnesota community water systems and the federal response.

  • Johnson Controls’ Up-to-97MW Guide Shows On-Site Power’s Waste Heat Is AI Capacity

    Johnson Controls’ Up-to-97MW Guide Shows On-Site Power’s Waste Heat Is AI Capacity

    TL;DR · 30-second read

    The Short Version

    Artificial intelligence data centers, the warehouse-sized buildings packed with computers, are running short of electricity. Many now build their own power plants on site.

    Those generators give off a lot of leftover heat. Johnson Controls, a large maker of building cooling equipment, has published a design guide for machines that turn that heat into cooling, instead of powering the cooling with electricity.

    The company says this can free up to 97 megawatts, enough electricity for tens of thousands of homes, to run more computers.

    Johnson Controls on July 29, 2026 introduced an Absorption Chiller Reference Design Guide aimed at AI data centers that generate their own electricity on site. According to the company’s announcement, the design can unlock up to 97MW of additional AI capacity. It does this by using waste heat from on-site generation to drive the facility’s cooling, which frees electricity that conventional electric chillers would otherwise consume.

    The guide is separate from the AI factory cooling reference design that Johnson Controls published earlier.

    Executive Summary

    A data center’s power supply is split between the computers themselves and everything that keeps them running, and cooling is one of the largest parts of that second share. Johnson Controls’ new guide targets that split. Absorption chillers produce chilled water using heat as their main energy input rather than an electric compressor. At a site that already burns fuel to make its own electricity, the exhaust and jacket heat from that generation can supply the chillers, so the electricity the cooling plant would have drawn can go to servers instead.

    The headline figure is an upper bound: up to 97MW. Johnson Controls has not tied that number publicly to a specific site size, generator type or climate. The strategic point stands even so. As AI developers move generation behind the meter to avoid long grid-connection waits, the heat those plants produce becomes an asset to design around, not a byproduct to vent. By publishing a dedicated guide for that scenario, separate from its broader AI factory cooling design, Johnson Controls is treating on-site power as its own design category.

    Why Waste Heat Becomes Compute Capacity

    A power-constrained AI campus has a fixed electrical budget, and every megawatt spent on cooling is a megawatt not spent on GPUs. Conventional data center cooling relies on vapor-compression chillers, the same basic principle as a household refrigerator, which run large electric compressors. Absorption chillers work differently. They use a heat source, such as hot water, steam or engine exhaust, to drive a refrigeration cycle, and they need only modest electricity for pumps and controls.

    Every fuel-burning generator, whether a gas turbine, a reciprocating engine or some fuel cell types, turns only part of its fuel into electricity. The rest leaves as heat. If that heat drives absorption chillers, much of the cooling load moves off the electrical budget and onto a thermal budget that was otherwise going to waste. The electricity released can power IT load. That is the mechanism behind Johnson Controls’ claim of up to 97MW of additional AI capacity. The pairing of generation with heat-driven cooling, long known as combined cooling, heat and power or trigeneration, is not new. What is new is framing it as a way to add AI compute capacity rather than as a way to save energy.

    The people most affected are developers building campuses with behind-the-meter generation, and the investors financing them. For those projects, capacity is often capped by how much power the site can produce, not by floor space or chip supply. Recovering cooling power from waste heat raises the ceiling on revenue-generating compute without adding generators.

    On-Site Power Changes the Cooling Question

    Grid interconnection, the process of getting a utility to connect a large new load, has become one of the slowest steps in AI data center development. That has pushed developers toward generating their own electricity, at least as a bridge until grid power arrives. Once a site makes its own power, its cooling design no longer has to assume that all energy arrives as electricity. Heat is available too, and a reference design that shows how to use it addresses a question these projects now face.

    This also explains why Johnson Controls kept the absorption guide separate from its earlier AI factory cooling reference design. A grid-fed facility and a self-powered facility start from different energy inputs, so a single template would fit one of them poorly. Splitting the guidance by power strategy lets engineers start from the case that matches their site.

    What “Up To” Leaves Open

    The benefit depends on several variables. It scales with how much recoverable heat the generation plant produces and at what temperature. It also scales with how much mechanical cooling the facility needs to begin with. Many new AI halls use direct liquid cooling with relatively warm water, which can reduce how many hours electric chillers must run. In those designs, the electricity an absorption system saves may be smaller than in a facility that relies heavily on chillers.

    There are physical trade-offs too. Absorption chillers are typically larger and heavier than electric chillers of similar cooling output. They also reject more total heat, which usually means bigger cooling towers and possibly more water use. The cooling supply becomes tied to generator operation, so designers must plan for backup cooling when generators are down for maintenance. None of this undermines the concept. It does mean the up-to-97MW figure is a best case, and actual gains will vary from site to site.

    Reference Designs as a Sales Channel

    For an equipment maker, a reference design is both engineering guidance and a way to get specified early. Developers under schedule pressure tend to adopt pre-engineered architectures instead of designing mechanical plants from scratch, and the vendor behind the template benefits. Johnson Controls, which sells chillers under its York brand, is positioning itself at the point where cooling decisions become inseparable from power strategy. That link matters more as on-site generation spreads across AI projects.

    Background

    Johnson Controls is one of the largest suppliers of commercial heating, ventilation and air conditioning equipment. Its York-brand chillers are widely used in large buildings and data centers. As AI workloads have driven sharp increases in rack power density, cooling vendors have released AI-specific reference architectures. Johnson Controls had already published an AI factory cooling reference design before this absorption chiller guide.

    Absorption cooling is a mature technology that has long been paired with on-site generation at universities, hospitals and industrial plants. Its relevance to data centers has grown as AI developers, facing slow grid connections, increasingly build their own generation and look for ways to get more compute out of every megawatt they produce.

    Sources

    Source: Johnson Controls introduces Absorption Chiller Reference Design Guide, unlocking up to 97MW of additional AI capacity from on-site power generation. Johnson Controls’ announcement of a reference design that uses on-site generation waste heat to cool AI data centers.

  • A 2% Premium Shows the Inverter Switch for AI-Era Power Hinges on Time, Not Price

    A 2% Premium Shows the Inverter Switch for AI-Era Power Hinges on Time, Not Price

    TL;DR · 30-second read

    The Short Version

    Every solar panel and battery farm needs a box called an inverter, which turns its power into the kind your sockets use. Many are connected to the internet, so a hacker could in theory take control of them.

    China has the factories to make about four in every five of the world’s inverters. Europe plans to stop funding big solar and battery farms that use inverters from countries it considers risky, including China.

    The International Energy Agency found switching adds only about 2% to a large solar farm’s cost. The harder part is time, as factories retool while artificial intelligence data centers need ever more power.

    In a commentary published July 29, 2026, the International Energy Agency (IEA) reported that China accounted for around 80% of global manufacturing capacity for the inverters used in solar and battery installations in 2025, and assessed the cost of moving away from suppliers that governments now classify as security risks. The analysis follows a European Commission decision to restrict EU funding, including through the European Investment Bank and European Investment Fund, for solar, wind and storage projects that use inverters from “high-risk” countries: China, Russia, Iran and North Korea.

    The IEA estimates that buying a utility-scale inverter from a manufacturer headquartered in the EU or another non-high-risk country costs about USD 13/kW more, roughly 75% above Chinese pricing, but adds just under 2% to total project cost. Europe’s inverter factories, at around 95 GW a year, already exceed its roughly 90 GW of annual shipments, though the IEA warns the models built locally may not match the models in demand.

    Executive Summary

    Inverters are the control layer of modern renewable power: the electronics that convert direct current from solar panels, batteries and many wind turbines into grid-ready alternating current, and that manage power flow, monitoring and grid safety. Because most are networked and remotely controllable, governments increasingly treat them as a cybersecurity exposure, with risks ranging from compromised passwords to back doors planted during manufacturing or malicious software updates.

    The policy response is spreading. Beyond the new EU funding restrictions, the US National Defense Authorization Act passed in December 2025 bars its funds from buying inverters from designated Foreign Countries of Concern, including China; Lithuania restricts remote control of inverters and now applies those rules to existing installations; and India requires inverters in a subsidised rooftop scheme to send data only to servers in India.

    The IEA’s central finding is that the price of de-risking is modest at the project level. That matters for anyone financing or buying power from new solar and storage, including the large electricity buyers behind AI data center growth: the binding constraint looks less like cost and more like whether the right inverter models can be produced in time.

    The Premium Is Real, but It Shrinks at Project Scale

    On a per-unit basis, the gap between Chinese and non-Chinese inverters is large. The IEA puts the average global inverter shipment price at around USD 28/kW, with high-power three-phase units near USD 25/kW and microinverters near USD 180/kW. For the systems typically used in utility-scale projects, shipments in key EU markets carried a premium of about USD 13/kW (EUR 12/kW) over Chinese prices, roughly 75% higher. The IEA attributes China’s lower prices to economies of scale, higher automation and intense price competition.

    Measured against the whole project, though, that premium is small. Utility-scale solar in the EU cost around USD 760/kW in 2024, so a USD 13/kW inverter premium works out to just under 2%. Small residential and commercial systems are more exposed: at around USD 1,000/kW installed, the IEA estimates a 3-4% premium for string inverters and about 20% for hybrid inverters and microinverters. In other words, the cost burden of the security push falls most heavily on rooftop segments the EU rules are not expected to cover, and least heavily on the utility-scale projects they are.

    Why the Constraint for AI-Era Power Is Timing, Not Price

    The headline aggregate looks comfortable: Europe could make around 95 GW of inverters a year in 2025, against total shipments of about 90 GW. Inverters are the one step of Europe’s solar supply chain where capacity exceeds demand, compared with just 33 GW of module capacity, 10 GW of cells and 1.5 GW of wafers against roughly 70 GW of module demand. Even adding around 17 GW of stationary battery deployment, which needs bidirectional power conversion, the IEA judges domestic capacity to be in excess of demand.

    The catch is fit. The IEA expects a likely mismatch between the models Europe produces and the models its market wants, noting that string and microinverters are often imported from China, and that retooling production lines to close those gaps is possible but would take some time. It says the mismatch could lead to project delays and cost increases. For utility-scale solar and storage developers, that is the operational risk: a sub-2% cost line is easy to absorb in a financial model, but a procurement delay on a power-conversion package can push back energisation dates.

    That sequencing matters to the buyers of that power. Data center operators expanding capacity for AI workloads are among the largest contracted buyers of new utility-scale solar and battery output, and utility-scale projects are expected to make up around half of global capacity additions over the coming decade in the IEA’s exploratory scenario projections. Where those projects rely on EU financing, the practical question for a data center’s power team is not whether compliant inverters cost more, but whether suppliers can deliver the specific models on schedule. The IEA points to partial relief: redistributing European output between exports and domestic demand, and higher imports from non-high-risk producers, notably in Southeast Asia.

    Security Rules Are Landing Where Controls Are Already Strongest

    The IEA describes how an attacker who gains access to an inverter could control and alter the equipment connected to it, with consequences ranging from localised disruption to lengthy blackouts. The threat can come through weak online connections and passwords, through back doors built in at the factory, or through malicious software updates from the manufacturer.

    The anticipated scope of the EU rules raises a fair question about fit between risk and remedy. Based on currently available information, the restrictions are widely expected to apply directly only to EU-funded utility-scale projects, which the IEA notes are professionally operated under stringent cybersecurity protocols. Most smaller rooftop installations in homes and businesses are not expected to be covered. Existing EU instruments, including the NIS2 directive, the Cyber Resilience Act and the Network Code on Cybersecurity, already address equipment security; how the new funding rule adds to them will depend on details the Commission has yet to publish.

    A Trade Dispute Layered on an Engineering Problem

    China is the only major inverter supplier among the four countries the EU designates as high-risk, and on May 8, 2026, China’s Ministry of Commerce criticised the restrictions, warning they could damage trade relations, supply chain security and Europe’s energy transition. Other markets face sharper exposure than Europe: Korean inverter manufacturers have raised concerns about the country’s more than 90% dependence on Chinese suppliers.

    The policy tools differ. The US approach restricts federally funded procurement, the EU’s restricts funding eligibility, Lithuania’s governs remote control and requires retrofits of some existing installations, and India’s targets where data is stored. For developers and equipment buyers operating across several markets, the likely outcome is not one standard but a patchwork of compliance regimes, each with its own implications for vendor selection and project timelines.

    Background

    Solar power has become one of the largest sources of new electricity worldwide: the IEA counts almost 3 TW of installed solar capacity supplying nearly 9% of global electricity, none of which could function without inverters. Battery storage and many modern wind turbines depend on the same power-conversion electronics, and inverters increasingly coordinate with connected loads such as electric car chargers, heat pumps and air conditioners.

    Chinese manufacturers have come to dominate inverter production through scale, automation and price competition, offering what the IEA describes as typically the lowest-cost option in most major markets with high performance and reliability. Europe is the second-largest producer, with about 8% of global capacity, and inverters are the one stage of its solar supply chain where domestic manufacturing exceeds demand.

    Sources

    Source: Inverter supply chains and cybersecurity – Analysis (International Energy Agency), an IEA commentary on inverter supply concentration, new EU sourcing restrictions and the cost of switching suppliers.

  • AI Breaches Now Cost $6M. IBM’s Data Says the Weak Spot Is Fixing, Not Finding

    AI Breaches Now Cost $6M. IBM’s Data Says the Weak Spot Is Fixing, Not Finding

    TL;DR · 30-second read

    The Short Version

    Criminals used artificial intelligence in about one in four serious hacking attacks last year, according to a yearly study backed by IBM. Many of those attacks used fake videos or voices to impersonate real people.

    Each of those attacks cost the victim about $6 million to deal with, roughly $1 million more than a typical break-in. Launching one can cost the attacker only thousands.

    The surprise: about half of companies use automated tools to spot attacks, but fewer than one in five use them to fix known weak spots before criminals get there.

    IBM said on July 29, 2026 that one in four malicious breaches in its 2026 Cost of a Data Breach Report were AI-enabled, which it described as a 56% increase over last year. Those breaches, mostly deepfake impersonation and AI-enabled malware, cost an average of $6 million, roughly $1 million more than the $4.99 million global average across all breaches in the study.

    The report, conducted by Ponemon Institute and sponsored and analyzed by IBM, covers breaches at 602 organizations worldwide between March 2025 and February 2026. A follow-on survey in May 2026 drew responses from 456 of those organizations.

    Executive Summary

    The headline number is the cost premium. By IBM’s account, AI-enabled breaches cost about 20% more than the average breach, while the attacks themselves are getting cheaper and faster to launch. IBM frames this as a shift in the economics of cyber risk: attacks that cost thousands to mount now produce losses in the millions.

    The more useful finding for security and infrastructure teams sits further down. More than half of organizations use AI agents, meaning software that can take actions on its own, to detect and contain threats. Only 18% use them for vulnerability management, the work of finding and fixing known flaws. IBM ties breach costs directly to the lag between discovering a problem and fixing it.

    The report also finds that more than 20% of organizations had a breach aimed at their AI models or applications. The most common causes were not exotic attacks on the models but ordinary weaknesses around them: exposed APIs and plug-ins, and misconfigured cloud environments running AI workloads.

    Thousands to Launch, Millions to Clean Up

    IBM’s central argument is that AI has widened a cost asymmetry that already favored attackers. Deepfake impersonation, in which synthetic audio or video of a real executive or colleague is used to trick staff into sending money or granting access, costs little to produce. AI-enabled malware can be adapted and scaled with less human effort. On the other side of the ledger, IBM puts the average AI-enabled breach at $6 million, against a global average of $4.99 million.

    That premium deserves careful reading. The release says AI-driven attacks were concentrated in financial services and energy, where average breach costs were $6.3 million and $5.2 million respectively. Some of the $1 million gap may therefore reflect which industries AI-enabled attackers targeted rather than anything intrinsic to AI-enabled techniques. The release does not say whether IBM controlled for sector or company size, so the premium is best treated as an observed average, not a measured effect of AI.

    The 56% increase is also stated without its base. Readers can infer that AI-enabled breaches were a meaningfully smaller share of the total a year earlier, but the release does not give last year’s figure.

    Finding Is Automated. Fixing Is Not.

    This is where the report’s numbers point to an operational conclusion. More than 50% of organizations reported using AI agents for threat detection and containment. Only 18% apply them to vulnerability management. In practice, many security teams have automated the alarm but not the repair: they can see an intrusion faster, but the known software flaws and misconfigurations that let attackers in are still patched on human timelines.

    IBM argues that this gap matters more as AI shortens exploit windows, the time between a weakness becoming known and attackers using it. Suja Viswesan, VP of IBM Security Software, put it directly: “When organizations have an extended gap between discovery and remediation, that imbalance shows up directly in breach costs.” IBM’s stated priority is to build remediation into development workflows and secure identity at runtime.

    The report’s other findings fit the same pattern of known, fixable exposure. Only 37% of breached organizations encrypt sensitive data both at rest and in transit, and just 34% have visibility into their cryptographic assets. The leading causes of AI-model breaches, compromised APIs and cloud misconfigurations, are well-understood problem classes rather than novel ones. Organizations using AI and automation in security operations cut breach costs by almost $2 million on average, per IBM, yet one in four have not adopted them at all. The release does not isolate the cost of slow remediation as a single number, so this conclusion rests on the deployment gap and the pattern of causes rather than a direct measurement. It is nonetheless the clearest reading of the data IBM published.

    AI Workloads Get Breached Through the Plumbing

    For data center and cloud operators, the most relevant statistic is that more than 20% of organizations reported a breach targeting AI models or applications. The two leading causes tied at 27% each: compromised APIs, applications or plug-ins, and cloud misconfigurations affecting AI workloads. APIs are the interfaces that let software systems talk to each other, and plug-ins extend what an AI application can reach. Both widen the surface an attacker can probe.

    This shifts attention away from attacks on model internals and toward the infrastructure surrounding them. AI workloads tend to sit in cloud environments with broad data access, many service connections and fast-changing configurations. Responsibility for those settings is typically split between the provider and the customer. When the weak point is a permissive storage setting or an unauthenticated endpoint, the fix is configuration discipline and access control, not a new class of AI security product.

    Critical Infrastructure and a Shift in Spending Intent

    IBM reports that 62% of AI-driven attacks targeted critical infrastructure sectors, with financial services and energy most affected. The company warns of cascading effects across supply chains and essential services. Energy is directly relevant to the AI buildout, since utilities and grid operators are central to powering new data center capacity. The release does not break down attacks on energy by subsector or describe any operational disruption.

    The follow-on research suggests awareness of advanced AI capabilities is moving budgets more than breaches do. Among surveyed organizations, 85% said they plan to increase security spending after learning about frontier AI cyber capabilities, compared with 64% that planned increases after experiencing a breach. These are stated intentions, not committed budgets, and 78% of follow-on respondents were aware of reports about frontier models such as Mythos. Three quarters said frontier AI threats are prompting them to rethink how agents are deployed across security operations. That suggests the remediation gap is recognized, even if it has not yet closed.

    Background

    The Cost of a Data Breach Report is a long-running annual benchmark produced by Ponemon Institute, a privacy and security research firm, and sponsored and analyzed by IBM. It surveys organizations that suffered breaches and estimates the full cost of each incident, including detection, containment, notification, lost business and recovery. Security leaders and insurers widely cite its averages when setting budgets and pricing risk.

    The 2026 edition is the first in which AI appears across nearly every finding. It covers AI as an attack tool through deepfakes and malware, as a defensive tool through agents and automation, and as a target through breaches of AI models and the cloud systems that host them. IBM is a hybrid cloud, AI and consulting company that also sells security software and services.

    Sources

    Source: IBM Study: One in Four Malicious Breaches are AI-Enabled, Costing Companies $6 Million on Average, IBM Newsroom’s July 29, 2026 announcement of its 2026 Cost of a Data Breach Report findings.

  • Meta Hands 80% of a $14B AI Campus to BlackRock, Turning Capex Into Rent

    Meta Hands 80% of a $14B AI Campus to BlackRock, Turning Capex Into Rent

    TL;DR · 30-second read

    The Short Version

    Meta, the company behind Facebook and Instagram, is building a huge computer complex in El Paso, Texas, to run its artificial intelligence products. It will draw about as much electricity as a large nuclear reactor produces.

    The twist is that Meta is not paying for most of it. Funds run by BlackRock, the world’s biggest investment manager, will own 80% of the roughly $14 billion project, and Meta will rent the space back.

    It is like building a house, selling most of it, and signing a long lease to keep living there. That shows how expensive the artificial intelligence race has become.

    Meta Platforms and BlackRock announced on July 28, 2026 a joint venture to develop and operate a data center campus in El Paso, Texas, with development costs of about $14 billion, Reuters reported in a story carried by The Journal Record. BlackRock-managed funds will own 80% of the venture and Meta 20%. Meta is contributing land and in-progress construction valued at about $2.3 billion, BlackRock about $4.9 billion in cash, and part of BlackRock’s investment will be financed with $12.5 billion of debt. Meta will also receive a $1 billion distribution to align ownership.

    The campus, already under construction near the Texas-New Mexico border, is designed for 1 gigawatt of compute capacity, with operations expected to begin in 2028. Meta will sign lease agreements with the venture, securing the capacity without funding or owning the campus outright.

    Executive Summary

    Meta has taken one of its largest AI construction projects and moved most of the ownership, and most of the funding burden, to an outside investor. Rather than paying for a 1-gigawatt campus upfront, Meta will hold a minority stake and pay rent for the capacity it uses. The deal lands as AI-related bond issuance has reached $270 billion by early July, according to BofA Global Research, nearly double all of 2025, and as Meta’s shares had fallen about 10% this year on concerns about AI spending.

    The significance is structural. Hyperscalers, the handful of companies that run cloud and internet services at global scale, have mostly funded their own data centers. This venture shows a different model: an asset manager owns the building, the power and the land, lenders finance much of it, and the tech company becomes an anchor tenant. For investors watching Meta’s $600 billion U.S. infrastructure plan, it is a signal that not all of that money has to come from Meta’s own cash flow.

    From Owner to Tenant: The Math Behind the 80/20 Split

    The disclosed figures show how the ownership split was engineered. Meta contributes land and construction already underway, valued at about $2.3 billion. BlackRock-managed funds put in about $4.9 billion in cash. Meta then receives a $1 billion distribution to align ownership, which leaves its net contribution at roughly $1.3 billion. Against BlackRock’s $4.9 billion, that is about 21% of the combined equity, consistent with the stated 20% stake. In effect, Meta recovers a meaningful slice of money it had already spent on the site and hands the remaining funding burden to its partner.

    The second half of the structure is the lease. Capital expenditure, or capex, is spending on long-lived assets such as buildings and equipment, paid upfront. Rent is paid over time. By signing lease agreements with the venture, Meta converts much of the cost of a gigawatt-scale campus from the first kind of obligation into the second. The $12.5 billion of debt that finances part of BlackRock’s investment means lenders to the venture, rather than Meta’s own bond investors, carry a large share of construction financing.

    This is not money that disappears. Long-term leases are commitments, and under U.S. accounting rules they generally appear on a company’s balance sheet as liabilities. What changes is the shape of the obligation: spread over the lease term, paired with an outside owner that bears the long-term value risk of the asset, and freeing Meta’s cash for chips, other campuses or shareholders. The people most affected are Meta shareholders, who see lower near-term spending on this site; BlackRock’s fund investors, who take on a long-dated, single-tenant asset; and the venture’s lenders, who take construction and tenant risk.

    Why Meta Wants Rent Instead of Receipts

    The timing explains the appeal. Meta has said it plans to invest $600 billion in U.S. AI infrastructure, data centers and jobs by 2028, and is building several gigawatt-scale campuses, including a Louisiana site it expects to expand to 5 gigawatts with investment above $50 billion. At that scale, even a company with Meta’s cash flow runs into limits on how much it can spend or borrow directly without unsettling investors.

    Matt Britzman, senior equity analyst at Hargreaves Lansdown, put the concern plainly: the scale of spending raises questions about cash flow, operating costs and returns, particularly because Meta does not yet have a large cloud business selling spare capacity to outside customers. Amazon, Microsoft and Google can rent surplus computing to others; Meta has mostly built for its own use. Reported talks to lease computing power to Anthropic, in a potential deal worth up to $10 billion over two years, suggest Meta is exploring that route, but no such deal had been announced.

    Against that backdrop, a structure that trims upfront spending while keeping full access to the capacity is a direct answer to the question investors are asking. Whether it improves Meta’s economics depends on the lease rate, which has not been disclosed.

    What BlackRock Is Actually Buying

    For BlackRock’s funds, the attraction is a long-term stream of lease payments from one of the world’s largest technology companies, secured by physical assets and, crucially, by access to power. A campus designed for 1 gigawatt, roughly the output of a large nuclear reactor, is hard to replicate quickly, which gives the site value beyond its current tenant.

    The risks are concentration and specialization. The venture has one disclosed tenant, and a building designed for dense AI computing is not easily repurposed. The asset’s long-term value depends heavily on Meta renewing its leases or on the venture finding other tenants willing to pay similar rates. Operations are not expected until 2028, so construction and schedule risk sit with the venture for the next two years.

    One Deal, Not Yet a Template

    Reuters framed the transaction within a broader pattern of tech companies turning to debt markets and fund managers for external capital. That pattern is visible in the bond figures, but one joint venture does not establish that Meta, or its peers, will finance every campus this way. The more telling test will be whether Meta applies the structure to Louisiana or other gigawatt-scale projects.

    What the ownership change does not alter is the local footprint. The campus still needs the same power, land and community acceptance whether Meta or BlackRock owns it, and AI data center expansion faced 142 protests across 42 states in July. For utilities, local governments and residents, the relevant questions about electricity, water and tax treatment remain the same regardless of whose balance sheet carries the building.

    Background

    Meta Platforms, the parent of Facebook, Instagram and WhatsApp, has become one of the largest builders of AI data centers in the United States, with 28 sites in operation or under construction. It had earlier described El Paso as a more than $10 billion project and is also building a Louisiana campus it expects to grow to 5 gigawatts. Earlier in 2026 Meta appointed Dina Powell McCormick as president and vice chairman to drive partnerships with governments and investors for its AI projects.

    BlackRock is the world’s largest asset manager. Its role here reflects a wider shift in which pension funds, insurers and other long-term investors, reached through managers like BlackRock, finance the physical infrastructure behind AI, much as they have long financed toll roads, pipelines and power plants.

    Sources

    Source: Meta, BlackRock announce $14 billion AI data center project in Texas — Reuters report, via The Journal Record, on the El Paso joint venture’s ownership, financing and capacity.