Civil nuclear facilities around the world are underprepared for the cyberattacks that could come from criminals, states and terrorist groups, according to a new report from the London-based Chatham House.

“The industry’s longstanding focus on physical protection” is the result of a misguided risk assessment, the report found, in an era where cyberattacks are “the most attractive route for those seeking to attack nuclear facilities without fear of interdiction.”