A Security-Perspective Breakdown
Late on the evening of November 26, 2025, roughly 11:30 p.m. local time, the Khor Mor gas field in northern Iraq’s autonomous Kurdistan Region was struck by a pair of armed drones (or potentially one drone and a crashing secondary drone), targeting storage tanks and igniting a blaze that would prove hard to extinguish. What followed was a cascade of consequences: the immediate shutdown of the field’s operations, a blackout across large swaths of Iraqi Kurdistan, and a stark reminder of the vulnerabilities inherent in Iraq’s energy security architecture.
When the smoke cleared, no group had stepped forward to claim responsibility. Iraqi authorities described the perpetrators as “outlawed elements,” possibly pointing to Iran-backed militias or other non-state actors operating with plausible deniability. The assault triggered not just a fireball, but an urgent scramble: local fire teams spent hours battling the blaze, while energy officials rushed to suspend gas flows, leaving power plants starved of fuel. The immediate human toll appears to have been lighter than in previous attacks; reports list some injuries but no confirmed deaths. Yet the damage ran far deeper than physical destruction.
Khor Mor is not simply another industrial site. Run by the consortium led by the UAE-based Dana Gas and Crescent Petroleum (among others), under the broader Pearl Petroleum umbrella, it sits astride a network that powers most of Iraqi Kurdistan’s electricity grid. The field’s production lines feed gas-fired power stations across Sulaymaniyah, Erbil, Chamchamal, Bazian and beyond. Disrupt that flow, and you don’t just disrupt a plant; you plunge millions into darkness. Officials warned of a drop of up to 3,000 megawatts in generation capacity. The nighttime drone strike triggered power outages across the region, with repair and restoration taking days; a dramatic blow ahead of winter, when reliable electricity is more than a convenience.
From a security-sector vantage point, the attack screams of design, not random chaos. This was not a failed reconnaissance, but a deliberate targeting of storage infrastructure; assets that are critical to sustained supply, yet often less protected than extraction or transport sites. Choosing a storage tank as a target maximizes disruption: when storage burns, pipelines can’t feed, and power stations go offline. It’s asymmetric warfare without needing to hold territory.
What makes Khor Mor especially vulnerable is the pattern: this was the eleventh major strike on the field. That tells us this isn’t a one-off problem, but a recurring strategic gamble. Whoever is behind this sees continued benefit in destabilizing energy flows. The timing, soon after a regional capacity expansion, which increased output significantly, may not be coincidental. According to industry sources, the field had just completed a capacity-boost project (KM250), raising production by 50% and enhancing its processing capability. In other words: bigger capacity, bigger target.
But why attack now? At a strategic level, disrupting gas flows doesn’t just cause blackouts: it hampers public confidence, damages investor sentiment, disrupts industrial activity, and undermines economic stability. In a region dependent on external energy imports and struggling with chronic power shortages, such a shutdown is a pressure point; a psychological as well as an operational weapon. As one analysis put it, the strike is less about physical damage than about “hindering security and economic stability.”
For the commercial environment in Iraq, especially for foreign and regional investors in the energy and infrastructure sectors, the attack signals a red flag: critical infrastructure remains exposed, and legal or political assurances can’t guarantee safety. Consider this: after the blaze and shutdown, the operator and government rushed to restore operations. By early December, gas flow had resumed, and electricity began returning. But the underlying vulnerabilities to drones, sabotage, and persistent threat actors remain unaddressed. A restored flow is not a restored guarantee.
The government’s reaction underscores how aware they are of this fault line. A joint investigation between the federal authorities and the Kurdistan Regional Government (KRG) concluded that two drones were involved: one struck the field directly, and the other crashed outside its boundaries. Debris was collected for forensic analysis. Arrest warrants have reportedly been issued for identified “offenders,” though publicly no group has been named. The proposed remedial measures, equipping Khor Mor with air-defense systems, improving intelligence sharing, and even reorganizing command structures, are sensible but reactive.
From a security planning and risk-management perspective, such responses are only the first step. What the November 26 attack highlights is a broader systemic problem: Iraq’s energy infrastructure remains highly centralized and exposed. Fields like Khor Mor with their vast pipelines, storage tanks and connection to civilian power generation represent a “single point of failure.” If a relatively low-cost drone can wreak such disruption, more coordinated, better-equipped actors might do far worse.
Operational security for such facilities must evolve beyond static perimeters and traditional military guard posts. Hardening must include layered defenses: persistent aerial surveillance, radar and drone-detection systems, electronic-signal monitoring, and rapid-response containment teams. Passive defenses, hardened storage tanks, blast-resistant barriers, and redundant supply lines should accompany active ones. Shared intelligence and coordination between federal forces, regional guards, private operators and foreign stakeholders must become standard, rather than reactive.
The commercial implications are also profound. International investors, energy firms, infrastructure funders, and insurers will view these recurring attacks as elevated risk. Cost of capital will rise; insurance premiums will spike; decisions on expansion, maintenance or investment will need to embed risk-mitigation costs. For companies like Dana Gas and Crescent Petroleum, the calculus shifts: will the return justify the security burden?
For the ordinary citizen in Kurdistan, the manager waking up to a dark apartment, the street vendor unable to keep lights on, the student unable to study, the impact is immediate and visceral. This brutal strike on Khor Mor proved how fragile the chain is between hydrocarbons beneath the earth and light in the lamp. The sense that energy is a constant, taken-for-granted commodity now feels shaky.
And that, perhaps, is the most dangerous effect of all: eroding confidence. Confidence not only in government or security forces, but in the idea that infrastructure will remain stable in an already volatile environment. Each blackout, each flare-up, chips away at the social license for commercial and foreign investment, and at the collective belief in long-term stability.
Yet, even here, there is a silver lining if those in charge act decisively. The government’s approval of the investigation’s results, its commitment to deploy air defense, and renewed cooperation between regional and federal authorities suggest awareness. What remains is follow-through: a sustained, layered, professional protection framework, with strong deterrence, transparent accountability and a shift from reactive crisis-management to proactive resilience planning.
In the end, the November 26 attack on Khor Mor is not just a story of fire and blackout. It is a warning. For policymakers, investors, companies, and civilians alike: in a region where heat and light are lifelines, energy security is national security. Failure to treat it as such risks plunging more than power stations into darkness.
