Iran-Linked Hackers Shut Down UK Power Plant in Four-Day Cyberattack

A UK power generation facility was completely shut down for four days due to a cyberattack attributed to hackers linked to the Iranian regime. The incident occurred recently, with British officials withholding the exact location and name of the affected plant for security reasons. Despite the shutdown, the plant is considered relatively small, and the disruption did not impact the broader national electricity supply or overall energy production in the UK.

This cyberattack coincided with a series of assaults on water infrastructure across 12 US states last month, which raised significant concerns at the White House. In response to the UK incident, the government briefed electricity company CEOs and issued directives to businesses, while reporting the event to the National Cyber Security Centre, part of the intelligence agency GCHQ, which advises on protecting critical national infrastructure from foreign threats.

British and American intelligence agencies have repeatedly warned about ongoing cyber threats from Russia, China, Iran, and North Korea targeting national infrastructure and government agencies. While previous cyberattacks have disrupted public health systems, schools, and commercial manufacturing lines, no group had yet succeeded in fully disabling a UK power station until now.

Security experts believe the attack was likely intended as a demonstration of capability rather than to cause direct harm to civilians. It is seen as a message that Iranian Revolutionary Guard-linked hackers can penetrate sensitive UK systems and disrupt infrastructure on command. Iran has significantly increased cyberattacks on Western countries following the Middle East conflict escalation and US and Israeli airstrikes since February.

A recent UK government risk assessment estimated a 5% to 25% chance of a severe successful cyberattack on local infrastructure, warning that artificial intelligence could make such attacks faster and more accessible. However, a government source downplayed the incident's scale, describing the affected site as "very small, less than a rounding error compared to our national grid capacity."