Tag: Department of Justice

  • Vistra’s 5,500 MW Deal Cleared on One Maine Plant: AI-Era Power M&A Is Judged by Grid

    Vistra’s 5,500 MW Deal Cleared on One Maine Plant: AI-Era Power M&A Is Judged by Grid

    TL;DR · 30-second read

    The Short Version

    • Vistra, one of America’s biggest power companies, has finished buying a rival called Cogentrix. The deal adds power plants that together produce 5,500 megawatts, enough at full output for several million homes.
    • The government’s competition watchdog let the deal through after the two companies agreed to sell one power plant in Maine.
    • The worry was that a company owning too many plants in one region could switch some off and push up electricity prices for everyone there.
    • This matters because tech companies building huge computer warehouses for artificial intelligence need enormous amounts of power, and fewer, bigger companies now own more of it.

    Vistra has completed its acquisition of Cogentrix Energy, a portfolio that Investing.com reported at 5,500 megawatts (MW) of generating capacity. The closing followed a decision by the US Department of Justice (DOJ) Antitrust Division, announced October 30, 2026, to end its investigation of the deal.

    MLex reported that the DOJ closed its probe after the two companies, both electricity suppliers in New England, unilaterally decided to divest a power plant in Maine. The department said the divestiture reduces “the combined firm’s ability and incentive to withhold electricity and raise prices,” and that it will “continue to monitor” the sale.

    Executive Summary

    One of the largest independent power producers in the United States now controls more dispatchable generation, meaning plants that can be ramped up or down on demand, at a time when data-center developers building for AI are competing for exactly that kind of firm supply. Antitrust review did not stop the transaction. It extracted one asset in one state.

    The shape of that remedy is the real news. The DOJ did not object to Vistra’s scale. It objected to concentration in a single regional market, New England, where both companies already sold power. Selling one Maine plant was enough to satisfy the department, and it did so without a court-filed settlement. Instead, the parties acted on their own and the DOJ said it would watch the sale.

    For anyone buying, selling or contracting with power plants in the AI buildout, the case is a clear illustration of how generation deals are judged: grid by grid, on the ability to move local prices, not on headline megawatts.

    One Maine Plant Carried the Whole Antitrust Case

    The arithmetic looks lopsided. The deal covers a 5,500 MW portfolio, and the remedy that satisfied federal antitrust enforcers was a single plant in Maine. That proportion makes sense once you look at the specific harm the DOJ named, which was withholding. In New England’s wholesale electricity market, operated by ISO New England, generators offer power into an auction. The most expensive plant needed to meet demand sets the price that every accepted plant is paid. A company that owns many plants in the same market can profit by holding one back, either by bidding it high or keeping it offline. Doing so pushes the clearing price up, and that higher price lifts revenue across the rest of its plants in that market.

    That incentive only exists where a firm’s plants share a market. A plant in one regional grid does nothing to the clearing price in another. That is why the DOJ’s concern centered on New England, where Vistra and Cogentrix overlapped, and why removing a Maine plant reduced both the combined firm’s ability and its incentive to withhold, in the department’s words. The rest of the 5,500 MW fleet went through.

    The operational consequence falls on the people doing the next deal. As AI-driven demand makes operating gas and other dispatchable plants more valuable, buyers assembling larger fleets will be tested on regional overlap, not national size. Deal teams should expect to map the combined footprint zone by zone, identify the plants that give them pricing leverage in a single market, and price potential carve-outs into their bids from the start. Sellers whose plants sit in a buyer’s home market should expect the same questions.

    Why Dispatchable Megawatts Are the Prize

    Data centers that train and run AI models draw large amounts of power around the clock, and they cannot pause when the wind drops or the sun sets. That makes dispatchable capacity strategically valuable. It is the supply that can be called on at any hour, and grid operators rely on it to keep the system balanced as large new loads connect.

    Building new generation is slow. New plants must clear the interconnection queue, the line of projects waiting for a grid operator to study them and approve their connection, and that process can take years. Buying plants that already operate sidesteps the wait. A larger fleet gives Vistra more assets to pair with large-load customers, more flexibility to serve tight regional markets, and more scale to spread operating costs over.

    None of that value has yet been converted into disclosed contracts. No data-center or other large-customer agreements tied to the Cogentrix plants were announced with the closing. The strategic logic is clear, but the commercial results are still to come.

    A Closing Statement Is Not a Consent Decree

    When the DOJ requires a divestiture, it often files a complaint and a proposed consent decree in federal court. A consent decree is a binding settlement that goes through public comment and usually gives the department approval over who buys the divested asset. This case took a lighter path. The companies decided on their own to sell the Maine plant, the DOJ closed its investigation, and it said it will continue to monitor the sale.

    For the merging parties, that route is faster and less burdensome. For the market, it places more weight on what happens next. The identity of the Maine plant’s buyer matters. A purchaser that already owns significant New England generation could recreate some of the concentration the divestiture was meant to remove, and the department’s ongoing monitoring presumably exists to guard against that outcome. The DOJ also retains its general authority to examine competitive effects after a deal closes.

    For New England electricity customers, the protection the DOJ described depends on that sale being completed with a buyer that brings no overlapping fleet. For future acquirers, the precedent is practical. A credible, self-initiated divestiture that targets the precise overlap can be enough to close a generation deal without litigation.

    Background

    Vistra is one of the largest independent power producers in the United States, meaning it owns power plants and sells their electricity into competitive wholesale markets and to retail customers, rather than operating as a regulated utility. Its fleet spans natural gas, nuclear, coal and solar generation across several regional grids, including New England. Cogentrix Energy is a power-plant owner and operator whose fleet is predominantly gas-fired.

    Wholesale electricity in New England is run by ISO New England, which holds auctions in which generators offer power and the highest accepted bid sets the price paid to all of them. Because that design rewards scarcity, antitrust enforcers reviewing power-plant mergers focus on how much capacity a single owner would control within one market. Interest in such deals has grown as data-center demand tied to AI has made operating, dispatchable plants more valuable.

    Sources

    Source: US DOJ issues closing statement for Vistra-Cogentrix electricity merger (MLex), on the Antitrust Division ending its review after a Maine plant divestiture. Also: Vistra completes acquisition of Cogentrix Energy for 5,500 MW (Investing.com), on the deal’s closing and capacity.

  • Hack-Back Memo Puts State Hackers Out of Scope, Despite Attacks on 45 Water Systems

    Hack-Back Memo Puts State Hackers Out of Scope, Despite Attacks on 45 Water Systems

    TL;DR · 30-second read

    The Short Version

    The American government will now let approved private companies break into, and even wreck, computers run by foreign criminal hacking gangs. In March, officials said they would not do this.

    Each company must set aside at least $1 million, which it loses if it breaks the rules. Every attack needs written approval from the Justice Department and Homeland Security.

    The catch: hackers working directly for a foreign government are off-limits. That matters because the order came after suspected Iranian attacks on water suppliers in 45 American towns.

    Tom’s Hardware reported that President Donald Trump signed a presidential memorandum on August 12 creating the first US program that lets vetted private companies conduct offensive cyber operations against foreign cybercrime organizations. These include operations that destroy data and systems. Participating firms must post at least $1 million in escrow, which they forfeit if they break program rules. Every operation needs written approval from Department of Justice and Department of Homeland Security officials.

    A National Coordination Center will run the program. Implementation guidance is due within 60 days. The policy reverses public statements administration officials made in March.

    Executive Summary

    The memorandum authorizes two kinds of activity. “Cyber Surveillance Operations” means getting into foreign systems without permission to gather intelligence while staying undetected. “Cyber Effects Operations” means disrupting or destroying those systems and their data. Both large firms and smaller specialists will be eligible. Participants may also sign commercial deals with other private firms and with state and local agencies to receive threat data and propose operations based on it.

    This matters for two reasons. First, it turns offensive cyber activity, long treated as a government monopoly in the US, into something a licensed private sector can do under supervision. Second, its target definition is narrow. A group qualifies as a target unless “clear intelligence exists” that it is part of a foreign government or wholly run at a government’s direction. So the program is aimed at criminal ransomware crews, not at the state-directed actors behind many attacks on physical infrastructure. For operators of water, power and data center infrastructure, that distinction shapes what the program can and cannot do for them.

    The Target Line Runs Straight Through Critical Infrastructure

    The memo arrived after suspected Iranian cyberattacks on water suppliers in 45 US municipalities. It also followed a CISA alert about Iranian hackers targeting programmable logic controllers (PLCs), the small industrial computers that open valves, run pumps and switch equipment at water and energy companies. Yet state-directed hackers fall outside the program’s own definition of a valid target. Private operators could go after a ransomware crew that encrypts a utility’s billing systems. They could not go after a government-run unit tampering with its treatment-plant controllers.

    The line is drawn deliberately. Ransomware crews that operate with a state’s tolerance but not under its formal control stay within scope, a description that fits much of the Russia-based ransomware ecosystem. Once an actor is clearly an arm of a foreign state, the matter stays with government. For utility and industrial security teams, the practical conclusion is that nothing changes for defending operational technology against nation-state intrusion. Segmentation, monitoring and incident response for control systems remain their responsibility. The new program targets the financially motivated threat, not the geopolitical one.

    There is also an ambiguity problem. Eligibility turns on whether “clear intelligence” ties a group to a government, and in practice attribution is often contested and slow. A group judged criminal today may later prove to have state links. That question will matter a great deal to any firm whose operation lands on the wrong side of the line.

    A $1 Million Bond on a Destructive Capability

    The escrow requirement is the program’s main economic control. A minimum of $1 million, forfeited for rule-breaking, is a meaningful commitment for a small specialist firm. Whether it is proportionate to the harm a destructive operation could cause is a separate question. Wiping servers that turn out to be shared with innocent third parties could produce losses well above that figure. The minimum works as a deterrent and an entry filter. It is not obviously a compensation fund.

    The commercial provisions may matter more for the market’s shape. Participants can contract with other private firms and with state and local agencies, receive threat data and propose operations based on it. That creates a potential new service line for security vendors: selling disruption, not just detection. Two background facts point the same way. Congress earmarked $1 billion for offensive cyber operations in last year’s spending bill. Google said in August last year that it was preparing to take part in disruptive actions against cybercriminals. Large platform companies with deep telemetry into criminal infrastructure look like natural participants. Smaller firms may compete on specialized tasks, as the eligibility rules anticipate.

    Escalation, Legal Exposure and a Classified Annex

    DOJ and DHS officials cannot approve operations likely to cause loss of life or amount to an armed attack under international law. The memo does not prohibit such operations outright, however. Approval authority for them sits in a classified annex. Companies weighing participation, and the public, therefore cannot see the full rulebook for the highest-risk cases.

    Personnel face exposure too. Jake Williams, vice president of research and development at Hunter Strategy, told TechCrunch that Americans involved in these operations “could easily be classified as non-uniformed combatants while traveling overseas.” That is a risk that falls on individual employees, not only on their employers, and firms will need to account for it in staffing, travel policy and insurance.

    The speed of the reversal adds uncertainty. In March, Thomas Lind, then a senior adviser at the Office of the National Cyber Director, said the administration had no plans to authorize private offensive operations: “We’re not interested in fighting pirates with pirates.” National Cyber Director Sean Cairncross said the same week that companies running offensive campaigns were not what the administration meant when it asked industry for help. A policy that changed direction within months could change again, which makes long-term investment in offensive capability a harder bet.

    Collateral Risk Is Written Into the Rules

    The memo requires any company that unintentionally hits a US person or a system on US soil to halt operations and notify the government immediately. That clause concedes that operations aimed abroad can land at home. Criminal groups commonly route activity through rented servers and compromised machines owned by unrelated parties. Hosting providers, cloud platforms and data center operators therefore have a direct interest in how approvals weigh that possibility, and in how quickly they would be told if their infrastructure were affected.

    Defenders more broadly face a quieter risk: retaliation. A criminal group whose systems are destroyed by a US firm may not distinguish between that firm and US targets generally. The memo’s safeguards govern how operations are approved. They do not change who absorbs the response.

    Background

    For decades, US law and policy have treated breaking into someone else’s computer as illegal, even when that someone is an attacker. Offensive cyber operations have been reserved for government agencies such as the military and intelligence community. Proposals to let private victims “hack back,” including the Active Cyber Defense Certainty Act introduced in Congress in 2017, never became law. Critics warned of misattribution, collateral damage and escalation.

    Pressure grew as ransomware crews, many operating from jurisdictions beyond the reach of US law enforcement, hit hospitals, pipelines and municipalities. Some large technology firms have already worked with authorities to take down criminal infrastructure, and Google said last year it was preparing to take part in disruptive actions. The August 12 memorandum is the first formal framework for private firms to go further, under federal supervision.

    Sources

    Source: White House authorizes private companies to launch ‘hack-back’ cyberattacks that destroy data and systems, targeting foreign cybercrime organizations. Tom’s Hardware on the August 12 presidential memorandum creating a supervised private offensive cyber program.