This study introduces a robust strategy for regulating output voltage in the presence of false data injection (FDI) attacks. Employing a hierarchical approach, we disentangle the distributed secondary control problem into two distinct facets: an observer-based resilient tracking control problem and a decentralized control problem tailored for real systems. Notably, our strategy eliminates the reliance on global information and effectively mitigates the impact of FDI attacks on directed communication networks. Ultimately, simulation results corroborate the efficacy of our approach, demonstrating successful voltage regulation within the system and proficient management of FDI attacks.