| Data halls | A DCIM compromise can disrupt monitoring of the hall even when the utility feed is still up. | 0-3 months | Wave 1 (direct) | CISA EcoStruxure advisory; Digital Realty 10-K |
| Campus power interconnection | Energization of new halls waits on a utility queue that already has gigawatts without connection dates. | 0-3 months | Wave 1 (indirect) | Dominion PJM deck; Dominion GS-5 report |
| UPS and backup generation | An internet-exposed UPS management interface can drop the backup path the hall uses when utility power fails. | 0-3 months | Wave 1 (direct) | CISA UPS insight |
| Cooling plant | A remote authentication bypass on cooling and power monitors can force a thermal shutdown of the hall. | 0-3 months | Wave 1 (direct) | CISA Liebert advisory |
| Server and accelerator fleet | New accelerator deliveries slow when Taiwan wafer and assembly output is limited, and China is named in the same assembly concentration list. | 1-6 months | Wave 2 (direct) | NVIDIA fiscal 2026 10-K |
| Hall network | The switching fabric inside the hall is the path a DCIM or UPS compromise uses to reach customer ports. | 0-3 months | Wave 1 (direct) | CISA IT sector page; CISA UPS insight |
| Submarine cable landings | International tenant paths are not the U.S. campus constraint; a landing outage is an indirect hit on cross-border workloads, not on Dominion's queue. | 0-6 months | Wave 1 (indirect) | Dominion PJM deck |
| Colocation tenants | Tenant workloads stop when the hall loses cooling, UPS, or the in-hall network, even if the tenant's own application is intact. | 0-6 months | Wave 2 (indirect) | Dominion PJM deck; Digital Realty 10-K |
| Fit-out counterparties | Electrical and mechanical contractors lose the next hall when the utility will not date the interconnection or the server shipment slips. | 1-12 months | Wave 3 (indirect) | Dominion GS-5 report; NVIDIA 10-K |
| Small hosting establishments | Hosting establishments with fewer than five employees have no campus queue of their own and fail when a shared upstream hall or their own exposed controller is hit. | 1-12 months | Wave 3 (direct) | Census CBP 2023; BLS NAICS 518; CISA UPS insight |