NY Army Guard's Cyber Protection Team 173 Fights Computer Battle During Kingston Armory Exercise

Why It Matters

The drill showcases the Guard’s ability to rapidly respond to ransomware threats that cost U.S. businesses over $12 billion annually, reinforcing the security of essential utilities. It also highlights the strategic value of leveraging civilian cyber talent within military units.

Key Takeaways

• 34 Guard soldiers completed cyber defense exercise at Kingston Armory.
• Simulated ransomware attack targeted an electrical utility’s network.
• Team identified breach, removed malware, hardened defenses successfully.
• Exercise used U.S. Cyber Command’s Persistent Cyber Training Environment.
• Guard members leveraged civilian cybersecurity expertise for mission effectiveness.

Pulse Analysis

Ransomware continues to dominate headlines, with the FBI reporting more than 3,000 attempts in 2024 that inflicted over $12 billion in losses on American businesses and critical services. Utilities, which power homes and hospitals, sit high on attackers’ target lists, prompting federal and state agencies to seek resilient defense mechanisms. The New York Army National Guard’s Cyber Protection Team 173 (CPT 173) stepped into this landscape, using a realistic, nation‑level simulation to rehearse a full‑scale breach of an electric utility’s network, thereby sharpening the nation’s collective cyber posture.

The Kingston Armory exercise leveraged the U.S. Cyber Command’s Persistent Cyber Training Environment, a sandbox that mirrors live‑network conditions while allowing participants to test detection, containment, and remediation tactics. Thirty‑four Guard soldiers, many employed by private‑sector firms such as General Dynamics, applied the Military Decision‑Making Process and Joint Planning Process to map the attacker’s reconnaissance, credential harvesting, and ransomware deployment. By isolating the malware, sealing exploited vulnerabilities, and establishing continuous monitoring, the team completed the mission half a day early, proving that disciplined, methodical response outperforms the Hollywood myth of lone‑wolf hacking.

Beyond the immediate training value, the exercise signals a growing reliance on public‑private talent pipelines. Guard members bring cutting‑edge civilian expertise into a military framework, creating a hybrid force capable of defending critical infrastructure in real time. Policymakers and utility operators can look to CPT 173’s model as a blueprint for joint cyber‑defense drills, encouraging more frequent, scenario‑based collaborations that bridge gaps between government resources and industry capabilities. As ransomware evolves, such integrated readiness programs will be essential to safeguarding the nation’s essential services.