Infrastructure security: AT&T, T‑Mobile, Verizon unite

AT&T, T-Mobile, and Verizon have officially joined a cable-led force to stop network vandalism.

This coalition confirms that copper theft and fiber cuts have evolved from localized crimes into systemic risks requiring a unified industry response. By pooling resources, these operators aim to dismantle the silos that previously allowed vandals to exploit gaps between wireless and cable domains.

The Strategic Threat Response & Infrastructure Knowledge Exchange coordinates intelligence sharing to identify repeat offenders across jurisdictional boundaries. Operational protocols now simplify law enforcement coordination and standardize responses to network vandalism. Framing these attacks as threats to critical communications infrastructure drives a unified policy strategy that no single operator could achieve alone. This cross-industry collaboration marks the end of isolated security efforts in favor of collective defense.

The STRIKE Initiative Changes Infrastructure Security Through Cross-Industry Collaboration

Defining the STRIKE Initiative and Its Core Mission

The Strategic Threat Response & Infrastructure Knowledge Exchange, known as STRIKE, directs focus toward network vandalism while framing select attacks as potential national security threats. NCTA–The Internet & Television Association and SCTE originally led this framework, creating a structure where former competitors address surging vandalism together. Substantial carriers including AT&T, T-Mobile, and Verizon now collaborate with cable operators to coordinate intelligence sharing and establish operational protocols. Connectivity functions as critical infrastructure requiring protection that exceeds standard property crime responses. The initiative seeks to align law enforcement priorities with industry data to mitigate these losses effectively. Operators must balance proprietary security details with the collective need for broader threat visibility. Just as IPv4 resource optimization requires coordinated market mechanisms, physical layer security demands similar cross-industry alignment to ensure network durability.

Cross-Industry Collaboration Against Copper Theft and Fiber Cuts

Competitors including AT&T, T-Mobile, and Verizon now operate a unified front against physical network vandalism. This strategic pivot transforms isolated infrastructure security incidents into a coordinated national defense priority. Executives from these companies participated in an event last week at Comcast's headquarters in Philadelphia to discuss these issues. Collaboration bridges the traditional divide between cable and telco operators, creating a shared intelligence framework.

Surging network vandalism creates operational paralysis that exceeds simple asset replacement costs. Competitors fiercely contest market share, yet shared dependency on physical media forces this rare alignment. Rapid incident response often conflicts with legal constraints surrounding proprietary network topology data. Operators must balance transparency with security to prevent bad actors from exploiting shared intelligence. Strict governance within the STRIKE initiative maintains trust among participants. InterLIR observes that optimizing logical resources remains vital while physical layers face such volatility. Securing the physical plant ensures the continued viability of IPv4 addressing schemes that rely on stable infrastructure. Efficient IP allocation strategies fail without physical integrity. The industry must treat every fiber cut as a potential systemic risk rather than a local maintenance issue.

Validating Membership for Telcos Joining the Cable-Led Force

AT&T, T-Mobile, and Verizon have officially joined the cable-spawned STRIKE initiative to combat network vandalism. This confirmation validates the expansion of the Strategic Threat Response & Infrastructure Knowledge Exchange beyond its original cable leadership. It has been confirmed that all three operators have officially become part of the network theft and vandalism initiative spawned by the cable industry last year. Goals for the initiative include the coordination of intelligence sharing, the establishment of operational protocols, and advancing a unified policy strategy.

Transforming competitive rivals into partners for infrastructure protection serves as the primary mechanism for this alliance. A constraint remains: while substantial carriers have joined, broader industry bodies like USTelecom are convening separately rather than holding official membership. Organizations such as the Wireless Infrastructure Association (WIA), USTelecom, and CTIA are not official members of the initiative but are convening on the initiative's issues. Executives from these organizations and operators convened last Thursday in Philadelphia for the Telecom Industry Summit on Protecting Critical Communications Infrastructure. Treating connectivity as critical infrastructure demands active participation in these verified coalitions. Infrastructure security depends on such unified fronts to mitigate surging threats effectively.

Network Vandalism and Copper Theft Drive Escalating Societal Costs and Outages

Defining Network Vandalism and Copper Theft Mechanics

Deliberate physical severance of fiber optics defines modern network vandalism, distinct from the extraction of legacy copper conductors for scrap value. Operators differentiate between opportunistic theft targeting metal prices and coordinated attacks disabling critical node facilities. The scale of disruption intensified when reported incidents rose 59% year-over-year, reaching 18,327 events in 2025 alone. This surge reflects a shift from isolated criminal acts to organized efforts compromising connectivity for hospitals and first responders.

Economic analysis by Dr.

Operational Mitigation Strategies Combine Intelligence Sharing and Law Enforcement Coordination

Defining Operational Mitigation via Off-Duty Police and GPS Tracking

Physical security protocols now prioritize off-duty police patrols alongside embedded GPS tracking to safeguard network nodes. AT&T stations sworn officers in high-risk zones such as Los Angeles to maintain 24/7 surveillance, triggering rapid response teams before standard dispatch cycles begin. This visible presence disrupts theft rings targeting high-value copper and fiber assets. Verizon employs comparable measures, installing GPS chips to trace stolen equipment while monitoring environmental anomalies like sudden air conditioning shutdowns that signal tampering. Such shifts often precede an active breach. The constraint here involves the recurring expense of private security against fluctuating threat levels across different geographies. Operators must weigh expenditure against the rising incident counts reported sector-wide. Intelligence sharing acts as the primary force multiplier; lacking unified data on theft patterns leaves local defenses reactive rather than predictive. Securing the physical plant directly supports continuity for IPv4 services underpinning global connectivity.

Executing Vandalism Reports and Intelligence Sharing Protocols

Perreault characterized the flexible as a "bit of a cat-and-mouse game," observing that thieves "are getting unique on how they are attacking our assets." Operators must formalize reporting workflows to immediately engage local law enforcement with evidence of organized disruption instead of isolated property loss. Thirteen states have enacted laws strengthening protections for critical communications backbone, creating a legal basis to elevate charge severity during police coordination. Effective intelligence sharing demands documenting distinct attack vectors so authorities recognize patterns crossing jurisdictional lines. The STRIKE framework standardizes how operators describe incident signatures to federal agencies. Without unified data submission, law enforcement frequently misclassifies sophisticated fiber cuts as petty vandalism, delaying resource allocation. A critical operational tension exists between rapid network restoration and preserving forensic evidence for prosecution. Rushing repairs destroys proof needed to secure felony convictions under new state statutes.

Maintaining detailed logs of asset tampering supports these cross-industry intelligence efforts. Physical hardening reduces exposure, yet consistent reporting drives the policy changes required for long-term protection. The industry must treat every cut as a potential national security event to justify necessary investigative resources.

Reporting protocols should align with felony statutes in Colorado, Connecticut, Oregon, and Virginia to elevate network vandalism charges. These four states have adopted felony-level protections. Operators must validate that incident documentation meets specific evidentiary thresholds required for felony-level protections rather than petty theft classifications. The federal Stopping the Theft and Destruction of Broadband Act of 2025, introduced by Congresswoman Laurel Lee and Congressman Marc Veasey, establishes a penalty framework operators should reference during law enforcement coordination.

Networks maintain detailed logs of service disruption impacts to satisfy these stricter legal definitions. A key tension exists between rapid physical repair and the preservation of forensic evidence required for prosecution strategy. Delaying restoration to secure a crime scene ensures law enforcement can process the site, yet this extends outage windows for end users. The cost of prolonged downtime often outweighs the benefit of criminal charges unless the attack involves organized syndicates. Operators must assess whether the perpetrator group warrants a full law enforcement investigation or immediate commercial recovery.

Legislative Momentum and Fiber Transition Offer Long-Term Infrastructure Durability

Felony-Level Protections in State Communications Laws

Thirteen states have passed laws designed to strengthen protections for critical communications grid by elevating vandalism from a misdemeanor to a felony-level offense. Jurisdictions including Colorado, Connecticut, Oregon, and Virginia now impose severe criminal penalties for damaging critical communications assets. This legislative shift addresses the reality that copper theft often serves as the entry point for broader network disruption targeting fiber routes and backup power systems. Operators frequently discover that vandals seeking scrap metal inadvertently sever high-capacity lines, causing disproportionate outages. The transition from copper to fiber remains a strategic priority, yet physical security upgrades must accompany migration plans to protect legacy interconnect points. Strengthening legal consequences creates a necessary deterrent framework that complements technical durability measures.

Strategic Fiber Transition as a Deterrent to Organized Theft

Migrating from copper to fiber removes the scrap value motivation driving organized theft rings. Industry leaders described the situation as organized and increasing, impacting first responders, hospitals, banks, and government facilities. Tom Monaghan, EVP of field ops at Charter Communications and STRIKE's vice chair, stated he has never seen theft this bad in his career regarding size and scope. Vandals frequently cut fiber optic cables while searching for non-existent copper, causing massive outages without gaining financial reward.

Fiber lacks intrinsic resale value, yet the transition period creates a vulnerable window where both media types coexist in the same rights-of-way. Attackers exploit this overlap to alter services regardless of the underlying technology. Security teams must monitor these mixed-media corridors closely during upgrades.

Compliance Checklist for Federal Broadband Theft Penalties

FCC Commissioner Olivia Trusty recently urged Congress to act quickly, noting that copper theft functions as an onramp to sophisticated disruption. Transitioning to fiber optics removes the financial motivation for thieves who frequently sever high-capacity lines while searching for non-existent metal. Recommendations include prioritizing asset hardening in tandem with network modernization efforts. Organizations joining the STRIKE initiative gain access to shared intelligence on threat actors targeting these transition zones. Regulatory alignment accelerates this protection.

References

• APNIC Articles – APNIC: Internet addressing in the 2010s