Iranian Hackers Successfully Shut Down UK Power Station in Unprecedented Cyberattack

Hackers linked to the Iranian regime have successfully disabled a power station in the United Kingdom for four days, marking the most effective cyberattack against the country to date. British officials, citing security concerns, declined to name the affected facility but confirmed that staff struggled for several days to restore operations. Experts believe the attack was primarily a demonstration of capability rather than an attempt to cause widespread harm.

This cyberattack coincides with a series of Iranian cyber operations targeting U.S. water infrastructure last month, which affected 12 states and raised concerns within the White House. The UK power station targeted is relatively small, and its shutdown did not impact the overall electricity supply or energy production in the kingdom.

Following the incident, the British government issued guidance to electricity company executives and businesses on necessary protective measures. The attack was reported to the National Cyber Security Centre (NCSC), part of the GCHQ intelligence agency, which has handled over 200 attacks on critical national infrastructure in the past year. The NCSC declined to comment specifically on this case.

Iran has significantly increased its cyberattacks on Western countries since the military conflicts with the U.S. and Israel began in February. Recent Iranian-attributed cyber incidents have also been reported in Germany, Poland, Finland, Belgium, and Albania. Despite previous warnings from British and American intelligence about cyber threats from Iran and other nations, this is the first known instance of Iranian hackers completely shutting down a UK power station.

The U.S. FBI attributed last month’s water infrastructure breaches to malicious cyber actors, likely from Tehran, which caused water pressure loss and forced some communities to boil drinking water. British intelligence committees had previously assessed the likelihood of an Iranian cyberattack on UK infrastructure as "unlikely," making this event a significant development in cyber threat dynamics.