Iran-Linked Hackers Shut Down Small UK Power Plant for Four Days

Staff at the affected facility spent four days working to restore operations and bring systems back online, illustrating the hands-on effort required to recover a small-scale plant after a cyber incident.
UK government sources described the site as a 'very small scale site' and said it was 'less than a rounding error' compared to grid capacity, highlighting the limited impact relative to the national grid and referencing thresholds for notifying cyber activity.
The government briefed power company chief executives and wrote to businesses with guidance and next steps on cyber security following the incident.
The incident occurred in July, coinciding with a wave of US water infrastructure cyberattacks that affected 12 states and drew concern from the White House.
Iran-linked hackers shut down a small British power plant for four days in what officials say may be the first successful cyberattack of its kind on UK energy infrastructure. The Telegraph and Daily Mail reported the facility was disabled in July while staff spent days restoring systems, but UK government sources said the site was a "very small scale site" and posed no threat to the wider national grid.
The incident coincided with a wave of cyberattacks on US water systems across 12 states that alarmed the White House. Mirror reported the attack demonstrated the capabilities of Iranian Revolutionary Guard Corps-linked hackers to penetrate British systems, though officials emphasized the outage remained contained and below thresholds requiring public notification.
Staff at the British facility faced a grinding four-day recovery after the attack shut down operations completely. Daily Mail reported workers had to bring systems back online manually, illustrating the hands-on effort required to restore even a small plant after a cyber incident. No details were disclosed about the specific systems targeted or how long repairs took once begun.
Government sources stressed the attack's limited impact on Britain's power supply. UK government called the site a "very small scale site" and said it was "less than a rounding error" compared to total grid capacity, meaning the outage barely dented national power availability. Mirror noted officials emphasized thresholds for notifying the public about cyber incidents, suggesting this attack fell below that bar.
Despite the small scale, the incident prompted swift action. The government briefed power company chief executives and issued guidance to businesses on strengthening cybersecurity, signaling heightened concern about future attacks amid rising tensions with Iran.
Security analysts and officials viewed the attack as a show of strength by Iran's Revolutionary Guard Corps. Australian Financial Review reported it was believed to be the first time hackers linked to the Iranian regime successfully shut down a British power facility. The timing and execution suggested a deliberate probe of UK energy defenses rather than a bid to cause mass damage.
The British power plant attack occurred as Iran intensified cyberattacks globally. In July, Iranian hackers also targeted US water infrastructure, hitting systems in 12 states and triggering White House alarm about the nation's water security. The dual campaign signaled an escalating cyber conflict between Iran and Western nations, with energy and water systems emerging as prime targets.
Publishers
15
Articles
31
Reach
46