With no suspects or motive announced, the FBI is joining the investigation into power outages in a North Carolina county believed to have been caused by “intentional” and “targeted” attacks on substations that left around 40,000 customers in the dark Saturday night, prompting a curfew and emergency declaration.

The mass outage in Moore County turned into a criminal investigation when responding utility crews found signs of potential vandalism of equipment at different sites – including two substations that had been damaged by gunfire, according to the Moore County Sheriff’s Office.

“The person, or persons, who did this knew exactly what they were doing,” Moore County Sheriff Ronnie Fields said during a Sunday news conference. “We don’t have a clue why Moore County.”

Fields said bullets were fired at the two substations. “It was targeted, it wasn’t random,” he said.

The sheriff would not say whether the criminal activity was domestic terrorism but noted “no group has stepped up to acknowledge or accept they’re the ones who (did) it.”

North Carolina Gov. Roy Cooper called the incidents a “criminal attack.” The Democrat said the state will make sure critical services have support.

Cooper told CNN’s “The Situation Room with Wolf Blitzer” it is important to find the perpetrators but also to think about preventative measures.

“We need to look forward, to look at how we can harden our electrical grid and make sure that our power sources are protected,” he said, adding the grid “can’t be this vulnerable that someone with knowledge of how to disable the electrical system could come in and actually do that in a very short amount of time.”

As of Monday afternoon, about 38,000 homes and businesses remain without power, according to Duke Energy spokesperson Jeff Brooks. He said it could take until Thursday to restore power to everyone affected.

Authorities announced a county-wide mandatory curfew from 9 p.m. until 5 a.m., starting Sunday night, with Fields saying the decision was made to protect residents and businesses.

The North Carolina State Bureau of Investigation also has joined the investigation, officials said.

Local business owner driving an hour for generator fuel

In the town of Southern Pines, one business owner has generator power and pancakes.

“We’re trying to help people who don’t really have an alternative,” Southern Pines Growler owner Gerald Bateman told CNN.

With the help of volunteers, Bateman is opening his business to the public from 9 a.m. to 6 p.m., he said. He also has to drive 50 to 70 miles every night to pick up fuel to keep the generators running in his business, he explained.

“We’re seeing about 20 to 30 people an hour. People have been coming in, grabbing some coffee, food and charging their phones,” Bateman said. “Multiple people have also told me how they’ve had to go to other counties for food.”

All schools in the county are closed Monday and Tuesday. Authorities have opened a shelter running on a generator. 

Overnight temperatures should be in the 40s

Traffic lights are also out, and while a few stores with generators were able to open their doors, several businesses and churches in Moore County were closed Sunday, CNN affiliate WRAL reported.

“We were just getting over Covid. And now this,” the sheriff said, adding, “It’s gonna hurt all of our restaurants and businesses.”

Inside people’s homes, it’s become difficult to keep the cold out.

“We have a 6-month-old baby in the house. We’re out of heat. We are trying to get heat for her,” Carthage resident Chris Thompson told WRAL.

Forecasters say temperatures will be in the mid-40s overnight. Tuesday afternoon temperatures will reach the lower 60s, forecasters say. For the rest of the week, low temperatures will be in the mid-50s and highs in the afternoon will top 70.

Carthage, the seat of Moore County, is about 45 miles northwest of Fayetteville and about 60 miles southwest of Raleigh. The county is also home to Pinehurst, a very popular golfing destination.

FirstHealth Moore Regional Hospital in Pinehurst is postponing some elective procedures and running on a backup generator, the hospital said in a statement.

“The widespread outages are impacting outlying FirstHealth clinics across Moore County,” said the statement. “Primary Care, Internal Medicine, Family Medicine and Convenient Care clinics in Moore County will be closed until power is restored,” said hospital officials.

National Security Council Spokesperson John Kirby said the White House is monitoring the “intentional vandalism” at the power station closely, and shoring up infrastructure against external threats is a major priority, CNN affiliate WTVD reported.

Millions of dollars worth of damage

The estimated cost of the substation damage is in the millions, the sheriff said Sunday.

The damage has been significant and rerouting power isn’t an option, said Brooks, the Duke Energy spokesperson.

“Equipment will have to be replaced,” Brooks said. “We’re pursuing multiple paths of restoration so that we can restore as many customers as quickly as possible. Recognizing that, we are looking at pretty sophisticated repair with some fairly large equipment.”

In addition to the gunfire damage at the substations, a gate at one of the locations appears to have been taken off its hinges, Asst. Chief Mike Cameron of the Southern Pines Fire and Rescue Department told CNN.

While it’s unclear what motivated the alleged vandalism, the sheriff on Sunday addressed rumors circulating on social media that the attack was an attempt to thwart a local drag show.

Fields said investigators “have not been able to tie anything back to the drag show,” which was scheduled in the town of Southern Pines at 7 p.m. Saturday, around the time the power went out.

The head of the LGBTQ+ group that helped organize the drag show said Monday she was unaware of any threats to the event before the attacks. Lauren Mathers, the executive director of Sandhills PRIDE, told CNN they received a lot of “hateful comments” on social media, but nothing that could be considered a threat.

The house lights were down between numbers when the power went out, so they didn’t realize anything was wrong when the lights didn’t come back on, she said.

CNN National Security Analyst Juliette Kayyem said the fact that the shooting was “targeted enough to bring down two different facilities” probably has investigators looking at an “insider threat.”

“They will be looking at the potential that there was either casing or someone who knew the area, knew the facilities and knew exactly where to shoot,” she said on CNN’s “The Lead with Jake Tapper.” “These aren’t drive-by incidents. These are ones in which you’re targeting directly.”

According to CNN Chief Law Enforcement and Intelligence Analyst John Miller, these incidents are similar to one more than nine years ago in California.

Sniper fire hit a Silicon Valley substation in April 2013, when 150 bullets from a rifle took out 17 transformers. Workers rerouted power in that case, but repairs to the transformers took nearly a month.

After that incident, power companies and the government undertook a systemic review of grid security and made changes to add more cameras and motion sensors, Miller said.

CNN’s Caroll Alvarado, Elise Hammond, David Williams, Jay Croft, Melissa Alonso, Joe Sutton, Aileen Graef, Keith Allen, Nicole Grether and Gloria Pazmino contributed to this report.