UK Power Plant Cyberattack Linked to Iran

A UK power plant was shut down after a cyberattack linked to Iran, though the government stated there was no risk to the wider energy system.

A small power plant in the U.K. was shut down for four days in July following a cyberattack carried out by hackers linked to Iran. This incident, reported by The Telegraph, coincided with warnings from U.S. authorities about malicious cyber actors targeting water facilities across multiple states.

The Cybersecurity and Infrastructure Security Agency, alongside U.S. intelligence agencies, attributed these threats to Iranian-affiliated hackers. In response to the power outage, a spokesperson for the U.K. government declined to assign blame for the incident or identify the facility affected by the attack.

“This story refers to an incident impacting a small-scale energy generator, and at no point was there a risk to the wider energy system,” the spokesperson stated. “The U.K. has a highly resilient energy system. We work closely with the energy sector to protect infrastructure and ensure the highest security standards.”

Following the incident, the Department of Energy Security and Net Zero briefed multiple energy CEOs and issued advisories regarding next steps for enhancing security. The department also indicated that it is updating its cybersecurity regulations to bolster defenses against such threats.

In light of ongoing tensions, cyber experts had previously warned of potential online attacks from Iran against U.S. businesses and infrastructure, especially since the escalation of U.S.-Iran relations in February. Recently, the U.S. Department of Justice charged 17 Iranians with conducting a massive cyber theft campaign on behalf of the Islamic Revolutionary Guard Corps and other entities connected to Iran.

On another front, Iran itself has been subjected to cyberattacks. In June, blockchain analytics firm Elliptic reported that Iran’s largest cryptocurrency exchange, Nobitex, was hacked for over $90 million. The attack, attributed to a pro-Israel hacking group known as Gonjeshke Darande, drained funds from platform wallets to addresses linked to anti-government sentiments, signaling the politically motivated nature of these cyber threats.