Crossing a fence or ignoring a posted sign at a protected facility is not ordinary trespass. Critical infrastructure trespass penalties start at misdemeanors with fines of a few hundred dollars and jail terms up to a year, climb to felonies carrying one to six years in prison when entry involves intent to damage or disrupt, and reach as high as 10 years and $100,000 in state fines when actual damage occurs. Federal charges for destroying an energy facility reach 20 years, and life imprisonment is available if someone dies.1Office of the Law Revision Counsel. 18 USC 1366 – Destruction of an Energy Facility
What Counts as Critical Infrastructure
Federal law defines critical infrastructure as systems and assets, physical or virtual, so vital to the United States that their incapacity or destruction would have a debilitating impact on security, national economic security, public health or safety, or any combination of those. The definition sits at 42 U.S.C. § 5195c and is used across federal agencies and adopted by many states.2Office of the Law Revision Counsel. 42 USC 5195c – Critical Infrastructures Protection The phrase “whether physical or virtual” is doing real work in that definition: it extends the category beyond fenced industrial sites to computer networks, financial systems, and telecommunications.
Presidential Policy Directive 21 built on the statute by designating 16 sectors and assigning a federal agency to each.3The White House. Presidential Policy Directive – Critical Infrastructure Security and Resilience The Cybersecurity and Infrastructure Security Agency currently recognizes those 16 sectors: chemical, commercial facilities, communications, critical manufacturing, dams, defense industrial base, emergency services, energy, financial services, food and agriculture, government facilities, healthcare and public health, information technology, nuclear reactors and materials, transportation systems, and water and wastewater systems.4CISA. Sector Risk Management Agencies The reach is wider than most people assume. The FDA classifies farms, food processors, storage warehouses, and even restaurants as critical infrastructure because disruptions to the food supply chain create immediate public safety risks.5U.S. Food and Drug Administration. Food and Agriculture Sector and Other Related Activities State statutes referencing “critical infrastructure” may protect any facility falling within these sectors, though the specific sites covered vary by jurisdiction.
Why Signage and Fencing Decide the Case
Trespass charges at protected sites almost always turn on whether the property was adequately posted or enclosed. Most state statutes require some combination of perimeter fencing designed to keep people out or conspicuous signs warning against unauthorized entry. Without that notice, prosecutors have a harder time proving you knew you were somewhere you shouldn’t be.
Federal rules get specific for certain facility types. Liquefied natural gas facilities, for example, must post warning signs along every protective enclosure at intervals close enough that at least one sign is visible at night from 100 feet away. The signs must display “NO TRESPASSING” or equivalent language on a sharply contrasting background.6eCFR. 49 CFR 193.2917 – Warning Signs Other facility types carry their own posting requirements. The principle is the same across jurisdictions: visible, unambiguous notice turns what might have been an innocent wrong turn into a prosecutable offense.
State Penalty Tiers for Trespass
Over 20 states have enacted laws that specifically criminalize trespass on critical infrastructure, and the penalties are dramatically harsher than ordinary trespass. Where garden-variety trespass on private land might result in a citation and a small fine, entering a posted infrastructure facility typically starts at a misdemeanor with real jail exposure and escalates from there.
Penalties across these states generally fall into three tiers.
Simple unauthorized entry into a posted or fenced facility, with no damage, is typically a misdemeanor carrying fines of $250 to $6,000 and up to a year in jail. A handful of states classify even simple entry as a low-level felony with sentences up to two and a half years.
Entry with intent to damage or disrupt commonly jumps to a felony. Fines at this tier generally run from $2,000 to $10,000, with prison terms of one to six years.
Causing actual damage or a service interruption is the most serious state-level category. Penalties reach as high as 10 years in prison and $100,000 in fines in some jurisdictions.
One detail many people miss: these laws apply even when you didn’t damage anything and didn’t intend to disrupt operations. The act of crossing a clearly posted boundary or climbing a fence at a protected facility is enough for the enhanced charge. Several states also require a custodial arrest rather than a citation, which means handcuffs and processing regardless of how cooperative you are.
Federal Penalties When Trespass Becomes Damage
When conduct goes beyond entry to actual destruction or sabotage, federal law takes over with penalties that dwarf state consequences. The most commonly charged federal statute is 18 U.S.C. § 1366, which covers destruction of energy facilities. The category includes any site involved in producing, storing, transmitting, or distributing electricity, fuel, or other energy sources.1Office of the Law Revision Counsel. 18 USC 1366 – Destruction of an Energy Facility
Penalties scale with the damage. Damage exceeding $5,000 carries up to 5 years in federal prison. Damage exceeding $100,000, or causing a significant service interruption, carries up to 20 years. If death results from the damage, the sentence can run any term of years up to life imprisonment. Those same penalties apply to attempts and conspiracies even if the plan never succeeds. Buying tools and driving to a substation with a stated plan can be enough for a conspiracy charge.
Maritime infrastructure has its own statute. Attacks on fixed maritime platforms, including oil rigs, offshore terminals, and port structures, carry up to 20 years in prison, or life if someone is killed.7Office of the Law Revision Counsel. 18 USC 2281a – Additional Offenses Against Maritime Fixed Platforms In the most extreme scenarios, using a weapon of mass destruction against any property within the United States carries a potential sentence of life in prison, with the death penalty available if anyone dies.8Office of the Law Revision Counsel. 18 USC 2332a – Use of Weapons of Mass Destruction
Federal Sentencing Enhancements for Simple Trespass
Even a straightforward trespass without sabotage can draw automatic sentencing increases in federal court. The base offense level for trespass under the U.S. Sentencing Commission’s Guidelines Manual is 4, a low starting point, but specific enhancements push it higher.9United States Sentencing Commission. USSG 2B2.3 – Trespass
- Trespass on a computer system that operates critical infrastructure: +2 levels
- Trespass at a nuclear facility, secure government building, or restricted airport or seaport area: +2 levels
- Possession of a dangerous weapon during the trespass: +2 levels
- Trespass at the White House or Vice President’s residence: +4 levels
The guidelines define critical infrastructure broadly to cover systems and assets vital to national defense, national security, economic security, or public health and safety, publicly or privately owned, with examples including gas and oil systems, water supply, telecommunications, power delivery, banking, emergency services, and transportation.9United States Sentencing Commission. USSG 2B2.3 – Trespass
Hacking Into Infrastructure Systems
Because the federal definition explicitly covers virtual systems, unauthorized access to the computer networks that run critical infrastructure carries its own federal exposure under the Computer Fraud and Abuse Act, 18 U.S.C. § 1030. You don’t have to physically enter a protected site. Breaking into a water treatment plant’s control system from a laptop qualifies.
Penalties escalate based on intent and harm.10Office of the Law Revision Counsel. 18 USC 1030 – Fraud and Related Activity in Connection With Computers Unauthorized access causing damage, threatening public health or safety, or affecting government computer systems carries up to 5 years for a first offense and up to 10 years for intentional damage. Repeat offenses run up to 20 years. Recklessly causing serious bodily injury carries up to 20 years, and causing death can bring any term of years up to life. The threat to public health or safety trigger is where most infrastructure cases land, since breaching a system that controls a power grid, water treatment process, or hospital network easily meets that threshold.
Drones Over Protected Sites
Flying an unmanned aircraft over critical infrastructure is treated as a distinct category of unauthorized access. The FAA prohibits drone flights over designated national security sensitive facilities from the ground up to 400 feet above ground level, regardless of the type of drone or the purpose of the flight.11Federal Aviation Administration. Critical Infrastructure and Public Venues Restricted sites include military bases, nuclear power plants, and national landmarks like the Hoover Dam.
State penalties vary. A first offense is typically a misdemeanor, but several states have escalated repeat violations or flights with malicious intent to felony charges. States commonly include electrical systems, refineries, chemical storage, water treatment plants, and wireless communication towers in their drone-specific infrastructure definitions. FAA enforcement actions for unauthorized flights near restricted airspace can carry civil penalties of up to $75,000 per violation.
Who Else Can Be Charged
These laws reach past the person who crossed the fence. If a group coordinates, funds, or directs unauthorized entry onto a protected facility, the organization itself faces separate criminal penalties. Several states impose fines on conspiring organizations that are multiples of the individual penalty, and at least one state allows fines up to $1,000,000 against organizations that coordinate infrastructure trespass or sabotage.
Vicarious liability goes further still. In a growing number of states, any person or entity that pays, compensates, or otherwise provides incentives for someone to trespass on critical infrastructure can be held responsible for all property damage committed during the trespass. An organization that reimburses someone’s travel to reach a pipeline site could be on the hook for millions in equipment damage, even without authorizing the destruction. People who encourage or incite others to trespass may face vicarious liability for the resulting harm as well.
Civil Lawsuits From Facility Operators
Criminal penalties are only part of the picture. Facility operators can sue trespassers directly for financial losses caused by the breach. Unlike the criminal case, where the state or federal government brings charges, civil suits are filed by the company that owns or operates the facility, and the exposure can be enormous.
Civil claims typically cover the actual costs of the breach: emergency response, production shutdowns, equipment inspection and repair, and revenue lost during the disruption. Facility owners can also seek attorney fees and court costs. Most jurisdictions base awards on actual proven damages rather than predetermined flat amounts. The practical effect is that even a brief unauthorized entry triggering a facility-wide security lockdown and evacuation can generate six- or seven-figure damage claims. Courts may also order restitution for security upgrades the facility installs after the breach.
Protest Activity and the First Amendment
The expansion of these laws has created real tension with First Amendment rights, particularly around pipeline construction and energy projects. Most of these statutes do not carve out any specific protection for peaceful protest or assembly, and the broad language in many state laws means demonstrators who step onto posted infrastructure property face the same enhanced penalties as someone entering with intent to cause damage.
A small number of states have attempted to address this by exempting “lawful assembly” or “lawful commercial and recreational activities” from their infrastructure trespass laws. Those carveouts have not always prevented arrests. Peaceful demonstrators near pipeline sites have been charged under these statutes even in states with explicit assembly exemptions. Civil liberties organizations have challenged these laws on the grounds that they are not narrowly tailored enough to serve a legitimate government interest without chilling protected speech. For anyone planning to demonstrate near an infrastructure site, the boundary line of a posted facility is also the line between a potential misdemeanor and a potential felony.