Iran-linked hackers shut UK power plant for four days

LONDON: Hackers linked to the Iranian regime reportedly forced a small British power-generating facility to shut down for four days last month in what could be the first known successful cyberattack of its kind against a UK energy site.

The incident, reported by The Telegraph, has raised fresh concerns about the ability of state-linked cyber groups to move beyond digital intrusion and cause disruption to physical infrastructure. However, British officials stressed that the affected facility was small and that the wider electricity system was never at risk.

The identity and location of the facility have not been disclosed for security reasons. According to reports, staff spent several days working to restore the plant and return its systems to normal operation.

The attack did not cause any significant impact on Britain’s overall electricity generation or supply. A government source described the facility as extremely small compared with the capacity of the national grid and said it did not fall within the category of major generators required to report certain cyber incidents.

Despite the limited disruption, the incident has attracted attention because of what it demonstrates about the evolving cyber threat. If confirmed, it would represent a significant step for hackers associated with Iran, showing that they were able to penetrate an energy facility and temporarily interrupt its operations.

The precise method used to gain access to the plant has not been publicly disclosed. Nor has the British government formally attributed the attack to a specific Iranian hacking group. The National Cyber Security Centre, which works with organisations to protect critical infrastructure, declined to comment on the individual incident.

British authorities have nevertheless taken the incident seriously. Government officials reportedly briefed senior executives at power companies and provided advice on how operators should respond to the growing threat of cyberattacks.

The incident comes amid heightened concern in Western countries over cyber operations linked to Iran, Russia, China and North Korea. British cybersecurity officials have repeatedly warned organisations to strengthen their defences as geopolitical tensions increase.

The attack also reportedly occurred around the same period as cyber incidents targeting water infrastructure in several US states, although the relationship between the incidents has not been established publicly.

For Britain’s energy sector, the episode serves as a warning even though the national grid remained unaffected. Smaller generators and industrial facilities can still provide potential entry points for attackers seeking to test their capabilities.

The immediate disruption may have been limited, but the incident has intensified scrutiny of Britain’s energy cybersecurity. Authorities now face the challenge of ensuring that a temporary shutdown at a small facility does not become a blueprint for attacks against larger and more strategically important infrastructure.