Iranian hackers successfully shut down a United Kingdom power plant for four days in an "unprecedented cyber attack" on Britain, it has been revealed. Cyber terrorists forced the unnamed facility to close completely while staff worked to restore systems.
Officials have not identified the specific power plant targeted, but reports indicate it was relatively small and the incident did not significantly impact the nation's overall energy supplies. The British government briefed power company executives on the incident, offering guidance and advice. The National Cyber Security Centre (NCSC), a public branch of GCHQ, is investigating the breach.
While the government maintains there was "at no point" a wider risk to the UK's energy system, experts warn the incident is a "chilling indication" of the potential harm from successful cyberattacks on critical infrastructure. This event occurred concurrently with a series of cyberattacks across more than a dozen U.S. states last month.
In late July, U.S. intelligence officials believe Iranian regime hackers targeted a water utility in western Arkansas as part of this broader campaign, according to The Washington Post. Suspected Iran-linked cyberattacks have also impacted water systems in states including Michigan, Minnesota, Georgia, New Jersey, and South Dakota, with over 30 community systems breached in Minnesota alone. In Georgia, hackers forced authorities to issue a boil water advisory after their intrusion caused a sudden drop in water pressure. While hackers gained remote access to pumps, valves, and pressure settings in several instances, officials stated these attacks did not affect drinking water.
U.S. and UK intelligence agencies have repeatedly flagged risks from foreign adversaries, including Iran, Russia, China, and North Korea. Critical national infrastructure and government agencies in Britain face thousands of attacks daily. Targets have included schools, NHS systems, and commercial facilities like production lines at Jaguar Land Rover. Customer information from major retailers has been compromised, and voter records were stolen from the Electoral Commission.
Experts have also noted that artificial intelligence tools could accelerate and enhance the efficiency of cyberattacks. Research from the UK's Cabinet Office suggests the risk of a serious and successful cyberattack against British infrastructure currently ranges between five and 25 percent.
A government spokesperson stated, "The UK has a highly resilient energy system. We work closely with the energy sector to protect infrastructure and ensure the highest security standards." They added, "This story refers to an incident impacting a small-scale energy generator, and at no point was there a risk to the wider energy system."