Iranian hackers reportedly shut down UK power plant for four fays
Iran-linked hackers shut down a small UK power plant for four days in what is described as the first successful attack of its kind on British electricity generation, according to a report by The Telegraph.
The incident, disclosed exclusively by the newspaper, involved hackers affiliated with Iranians disabling a relatively small electricity producer.
Staff worked for four days to restore operations.
Officials have not named the site for security reasons, but the outage had no effect on the UK’s wider power grid or national energy supply.
The Telegraph reported that the attack coincided with a series of Iranian-linked cyber incidents against US water and wastewater infrastructure last month that affected facilities across 12 states.
Those breaches caused flooding, loss of water pressure and boil-water advisories in some areas.
US authorities initially referred to “malicious cyber actors,” with later confirmation pointing to Tehran.
British officials assessed that the UK incident was unlikely intended to inflict genuine harm on civilians and was not widely noticed by the public.
It may instead have been designed to demonstrate that hackers linked to Iran’s Islamic Revolutionary Guard Corps could gain access to sensitive systems and shut down infrastructure.
A government source described the affected site as “a very small scale site, less than a rounding error compared to grid capacity.”
In response, the UK Government briefed the chief executives of power companies and issued written advice to businesses on protective measures.
The incident was reported to the National Cyber Security Centre (NCSC), the public-facing arm of GCHQ.
The NCSC declined to comment on the specific case, consistent with its usual practice of not acknowledging individual incidents.
A government spokesman stated: “The UK has a highly resilient energy system. We work closely with the energy sector to protect infrastructure and ensure the highest security standards. This story refers to an incident impacting a small-scale energy generator, and at no point was there a risk to the wider energy system.”
There are dozens of small-scale plants across Britain, many gas-fired and used only intermittently to support the grid.
Iran has intensified cyber operations against Western targets since the escalation of Middle East conflict and the start of US and ‘Israeli’ air strikes in February.
The NCSC previously urged organisations to strengthen defences in March, while its chief executive, Richard Horne, noted in June that the agency had handled more than 200 incidents affecting critical national infrastructure in the prior year.
Intelligence assessments have long highlighted Iran’s cyber capabilities as an area of asymmetric strength, even as the overall risk of a major successful attack on core UK infrastructure has been rated between 5 and 25 percent.
