A small power facility in the UK was forced to stop operating for four days in July after a cyberattack reported allegedly linked to Iranian hackers. The incident is believed to be the first reported case of Iran-linked hackers successfully shutting down a British power facility.
UK authorities stressed that the affected site was a small generator and that the attack did not threaten the wider electricity system. The identity of the facility has not been disclosed.
The Department for Energy Security and Net Zero (DESNZ) said there was no risk to the broader UK power supply from the incident. The National Cyber Security Centre (NCSC) is also understood to have received no reports of outages involving regulated operators of major power stations. Officials have not released technical details of the attack. Security concerns have also prevented authorities from identifying the affected facility.
The incident shows the potential exposure of smaller energy operators as digital systems become more closely tied to power generation. The UK government published an energy-sector cyber security strategy in May, warning that the country's increasingly digital and interconnected energy infrastructure faces growing cyber risks.
The reported attack comes as UK authorities warned organizations to strengthen their cyber defences following the conflict in the Middle East. In June, the NCSC said Iranian state and Iran-linked cyber actors retained the capability to conduct cyber operations. It also warned of a heightened risk of indirect cyber threats for organizations with links or supply chains in the region. The timing has added attention to the UK's wider security concerns.
Britain allowed the US to use RAF Fairford and the UK-US facility on Diego Garcia for limited defensive operations against Iranian missile threats, according to the information provided. Iran also warned that military bases used for attacks against its territory could be treated as targets. The UK government said it is prepared to defend itself against such threats. The latest incident did not disrupt Britain's wider power supply. The UK government identified stronger detection, response and recovery measures as priorities for the energy sector.
Also Read: Smart Buildings in the UAE: Enhancing Energy Efficiency and Sustainability