How do large-scale blackouts actually happen?

Large blackouts are almost never caused by a single failure; they are cascading failures. One local fault pushes power onto neighbouring lines, those lines overload and trip in turn, and the collapse spreads. In the 2003 Northeast blackout, an untrimmed tree plus a software bug in the alarm system led 256 power plants across the US and Canada to trip within 12 seconds, leaving 30 million people in the dark.

The 14 August 2003 Northeast blackout remains the textbook minute-by-minute anatomy. At 12:12 an Ohio power plant tripped on a mechanical fault — harmless in a healthy grid. At 14:14 an Ohio high-voltage line sagged into an untrimmed tree and tripped on a short circuit. At 15:05 a software bug in the grid alarm system stopped operators from noticing that the first line was already down; they still believed the grid was running at full capacity. By 16:10, with no alarms, more lines sagged and tripped, and power began detouring around the faulted section, overloading healthy lines. At 16:11 the cascade became unstoppable: within 12 seconds, 256 power plants and hundreds of substations across the United States and Canada tripped to protect themselves.

Trees are far from the only trigger. India's July 2012 blackout was the largest in human history, affecting more than 620 million people — roughly half the country's population. It was not a natural disaster but a systemic failure of governance and physics: several northern states over-drew from the grid during a weak monsoon, weakening the inter-regional ties, and when a key line in Rajasthan tripped, the resulting power surge destroyed the entire northern grid. On 13 March 1989 a solar coronal mass ejection induced geomagnetically induced currents (GIC) in long transmission lines, saturating and burning out transformer cores; the whole Hydro-Québec grid collapsed in 90 seconds, leaving six million people without power for nine hours.

In February 2021 Winter Storm Uri hit Texas, whose ERCOT grid is famous for being an energy-only market physically islanded from the rest of the US. With no interconnection to the Eastern or Western grids it could not import power; gas pipelines depended on electric pumps, so once the power failed the pipelines lost their own fuel supply, creating a gas-electricity death spiral. Retail prices spiked to USD 9,000 per MWh and hundreds died in the dark. The lesson is that resilience needs winterised physical infrastructure and regional interconnection, not just high prices.

Blackouts also have a social dimension and a set of modern threats. The 1977 New York blackout was a social failure rather than an engineering one: a lightning strike in Westchester County cascaded and left the city dark for 25 hours in record heat, triggering widespread looting and arson, more than 3,000 arrests and over 1,000 fire alarms. Today's grids face climate extremes — ageing Californian overhead lines have become a leading cause of the state's deadliest wildfires, forcing utilities into Public Safety Power Shutoffs — and cyber attack: in 2015 a Ukrainian utility suffered the first successful cyber attack on a power grid, cutting power to 225,000 people. On the defensive side, the Hornsdale Power Reserve built after South Australia's 2016 statewide blackout (100 MW, later expanded to 150 MW) can inject power within 100 milliseconds, where conventional generators need seconds.

A grid is only as strong as its weakest sensor and its longest-untrimmed tree.

This question is covered in depth in The Full Spectrum Every Energy Source Explained — A Singapore Perspective，第十二章 12.6–12.7