ERCOT says data centers can trigger Spain-style blackouts

Published on: Jun 8, 2026
Author: Nigel Trimmer

What if the next major outage starts with demand vanishing, not supply failing. That is the paradox ERCOT just underlined. In stress tests, clusters of hyperscale data centers and crypto mines did not ride through routine voltage sags. They dropped off the grid in blocks bigger than Boston. Losing load that fast does not save you in a tight system. It injects a shock. Frequency jumps, generators misbehave, and a local hiccup turns into a state-wide problem. This is not a quirky Texas story. It is the mirror image of Spain’s 2025 collapse and a lesson in how modern, electronics-heavy power systems fail in fat tails, not averages.

ERCOT’s data center trip risk is a system design flaw, not a footnote

ERCOT reports at least 26 large-user disconnections since 2023 and now sees roughly 20 gigawatts of similar applicants in the queue. Four tested clusters were each capable of dropping more than 5,000 megawatts in one event. That is not a demand response program. That is a stressor. In an already lean reserve margin, an abrupt loss of demand forces frequency up. Over‑frequency trips, turbine overspeed constraints, and inverter control limits can combine into cascading miscoordination. The grid was designed around synchronous machines with inertia that buys time. Today’s mix leans on power electronics with faster, stricter protection. The outcome is familiar in engineering: when tolerances narrow and coupling tightens, disturbances propagate faster and farther. You do not get graceful degradation. You get cliff edges.

Spain showed the supply-side version of the same fragility

Spain and Portugal’s April 2025 event was not a morality tale about one fuel. European investigators and multiple outlets traced it to systemic gaps in voltage and reactive power control, divergent responses by generators, and widespread tripping amid a voltage surge. Many renewables ran in fixed power factor modes that did not support the system when it mattered. Natural gas plants played a stabilizing role in recovery, but not because gas is pure and solar is sinful. It is because synchronous machines with headroom, inertia, and robust ride-through make a grid forgiving. A frequency deviation of a few tenths of a hertz and a fast voltage rise were enough to topple a region that had been operating with little spinning stability. Spain was the supply-side shock. ERCOT is warning about the demand-side twin.

The physics investors keep waving away

Markets price megawatts. Grids trade in attributes: inertia, fault current, dynamic reactive power, and control diversity. Inverter-based resources and hyperscale electronic loads behave unlike the machines the network was built around. They are precise and efficient, but they are also brittle when protection schemes are not harmonized. Small errors compound under speed. Think of a flywheel versus a metronome. The flywheel resists a shove; the metronome skips a beat. Investors extrapolating AI load growth on straight lines miss that stability is nonlinear. N minus 1 security turns into N minus many when similar controls react the same way to the same disturbance. A 0.15 hertz deviation in one case, a brief voltage sag in another, and you are trading in fat tails. You do not need malice or weather calamity. You need coordination failure at high penetration.

Protection settings are a prisoner’s dilemma

From the perspective of a data center or mine, tripping offline during a sag is rational. Protect the servers, preserve the rigs. From the perspective of the system, synchronized self-protection is a common pool failure. Everyone takes stability from the same pool. If each actor optimizes for its own threshold, the pool is depleted. Game theory tells you voluntary coordination fails when the payoff for defection is immediate and the cost is socialized. That is why interconnection rules and performance standards exist. They must now extend, with teeth, to large loads. Voltage ride-through, frequency ride-through, dynamic reactive support, and fault ride-through are not nice to have checkboxes. They are the admission ticket for operating at scale. Penalties for nonperformance and requirements to test to failure in realistic scenarios should be the norm, not the exception.

Market design still misprices the attributes that keep lights on

Energy-only markets reward kilowatt-hours and scarcity intervals. They rarely pay explicitly for inertia or voltage support. Capacity markets pay for availability, but accreditation of effective capacity for inverter fleets, batteries, and demand-side resources often lags their real behavior under stress. The result is a quiet subsidy for fragility. If load tripping imposes a system cost, that cost should show up in a tariff. If generators that can provide fast frequency response, dynamic reactive power, and fault current are scarce, those attributes should be priced and procured. PJM’s scramble for firm supply near data center clusters and ERCOT’s new focus on ride-through are signals that the old product set is incomplete. You do not stabilize a 21st‑century grid with 20th‑century payment rails. Pay for what you need or you will not get it.

Technology can close the gap, if it is aligned with the grid

The tools exist. Grid-forming inverters can provide synthetic inertia and fast voltage control. Battery systems can inject or absorb power in cycles, not minutes. Vendors now demonstrate zero-voltage ride-through in UPS architectures for AI workloads, keeping racks stable while supporting the grid rather than abandoning it. Research is converging on dual active and reactive control strategies that let large electronic loads ride through sags and contribute dynamic VARs when the system is stressed. But black box fixes create their own model risk if they are deployed at scale without transparent test regimes. ERCOT’s simulations are a start. They should evolve into standardized, audited performance tests at commissioning and in service. Trust but measure. And most importantly, pay these capabilities, not just nod to them in interconnection appendices.

Resilience is a portfolio, not a slogan

There is no single-fuel absolution here. A resilient portfolio blends new nuclear where siting and timelines allow, fast-start gas with flexible ramping, retention of legacy dispatchables that still clear on economics, and renewables integrated with grid-forming controls. It includes minimum inertia floors, synchronous condensers where needed, and explicit procurement of dynamic VARs. It requires interties that can withstand and help damp local shocks. On the demand side, it means hyperscale customers shoulder the duty to ride through and, when possible, support the system. Islandable designs with on-site generation and storage can prevent a data center from becoming a grid liability. The aviation industry does not certify planes on paper models alone. Power systems should not either. Test to failure, publish results, and enforce consequences.

The uncomfortable forecast

The next decade’s risk is not a slow energy shortfall. It is fast instability amid plenty of nominal capacity. AI, crypto, and electrification could more than double or even quadruple peak demand in certain pockets before long‑lead infrastructure arrives. If the marginal megawatt is intermittent or sensitive, and the marginal load trips on a blip, the system’s tolerance shrinks. Spain needed only a small deviation to cascade. Texas has already seen dozens of demand trips in fair weather. Probability is being misread as calendar time. Investors are pricing capacity growth; they should be pricing the optionality of stability. The most bullish bet on AI is not only new megawatts. It is a grid that can take a punch. Without that, the headline risk is not whether data centers will be built. It is whether they will stay online when the grid breathes hard.

Clean Energy Consumer Products and Services Lithium