Iran Disrupts UK Power Station for Four Days in Cyberattack, Government Responds

Last month, Iran executed a cyberattack that disabled a British power station for four days, marking the first time hackers linked to the Iranian regime successfully shut down such a facility in the UK, according to a report by The Telegraph. The affected power station was relatively small, and its outage did not impact the overall electricity supply or energy production in the country. Efforts are ongoing to restore the station's operations.

The British government has briefed electricity companies across the kingdom and issued additional guidelines to prevent similar cyberattacks. The incident was reported to the National Cyber Security Centre (NCSC), part of the GCHQ intelligence agency, which advises companies on protecting national infrastructure from foreign threats.

Intelligence agencies from the UK and the US have repeatedly warned about cyber threats from hackers based in Russia, China, Iran, and North Korea, who target critical national infrastructure and government agencies daily. Iran has notably increased its cyberattack attempts against Western countries since the outbreak of war, with Israel among its primary targets.

The cyberattack on the UK power station coincided with a series of assaults on water infrastructure across 12 US states last month, raising concerns at the White House. US government agencies have also warned of unidentified hackers attempting to breach Siemens-manufactured devices used to monitor and operate water and other critical infrastructure systems.

Experts have previously cautioned that the UK is not fully prepared for the scale of malicious cyber threats from hostile actors. Last year, the British Parliament’s Intelligence and Security Committee, overseeing intelligence agencies, described the likelihood of an Iranian cyberattack on UK infrastructure as "unlikely," but noted Iran’s significant investment in cyber warfare, with groups comprising hundreds of operatives.

A UK government spokesperson stated, "The UK has a highly resilient energy system. This incident involved a cyberattack on a small-scale energy generator, and at no point was there a risk to the wider energy system."