UK Power Plant Shut Down for Four Days After Suspected Iran-Linked Cyberattack

A power plant in the United Kingdom was forced to shut down for at least four days following a suspected cyberattack believed to be linked to Iran, according to reports by The Telegraph and the BBC. The incident, which occurred last month, is being described as one of the most significant successful cyber intrusions against UK infrastructure in recent years.

British authorities have not publicly identified the affected facility, citing security concerns. Officials reportedly believe the plant was relatively small and that its shutdown did not affect the wider UK electricity supply.

According to The Telegraph, investigators suspect the operation was intended to demonstrate that hackers allegedly linked to Iran’s Islamic Revolutionary Guard Corps could penetrate British systems and disrupt sensitive infrastructure.

The reported attack comes amid growing Western concerns about Iranian cyber capabilities. Iran has long been regarded as a capable state-backed cyber actor, and security agencies have warned that tensions in the Middle East could increase the risk of attacks against critical infrastructure.

Suspected Iran-linked cyber incidents have also been reported in Germany, Finland, Poland, Belgium and Albania.

In March, Jonathan Ellison, director for national resilience at Britain’s National Cyber Security Centre, warned UK organisations to remain vigilant against potential cyber compromise, particularly those with assets or supply chains connected to regions affected by geopolitical tensions.

The UK incident reportedly occurred around the same period as a wave of cyberattacks targeting water utilities in the United States.

ADVERTISEMENT

The attacks affected drinking-water and wastewater facilities across 12 states, including Minnesota, Michigan, Georgia, South Dakota and New Jersey. The first reported incidents emerged from Minnesota on July 26.

The FBI attributed the activity to malicious cyber actors, while US government sources reportedly indicated that Iran was likely behind the campaign.

The incidents have intensified concerns over the vulnerability of Western critical infrastructure, where even relatively small facilities can become targets for state-linked cyber operations seeking to demonstrate access, create disruption and expose weaknesses in essential systems.