Iran-Linked Hackers Blamed for Cyberattack That Shut Down UK Power Plant
A small British power plant was shut down for four days after a cyberattack linked to Iran, though the UK government said the grid was unaffected.
A spokesperson for the Department for Energy Security and Net Zero said the country's energy system remains highly resilient and that officials work closely with the sector to protect infrastructure. The spokesperson declined to attribute blame for the outage or identify the facility. The National Cyber Security Centre, which handles attacks on critical infrastructure, is understood not to have received any reported disruptions from regulated power station operators.
The Telegraph said the shutdown occurred in July, around the same time US agencies including the FBI and the Cybersecurity and Infrastructure Security Agency warned that Iranian cyber actors were targeting water facilities in at least seven states. The report also lands as the UK has allowed the United States to launch what it calls defensive operations from British bases hosting American planes since the start of the US-led war on Iran. The policy has not been changed by the new prime minister, Andy Burnham, who was notified last week of a decision to extend the agreement.
Iran's Islamic Revolutionary Guard Corps said last month that any base used for aggression against Iranian territory would be considered a legitimate target. Britain's government said in July it was ready to defend itself after Iran's military made that warning.
Hostile states such as Russia, China and Iran have increasingly targeted systems behind the UK's key services, according to Richard Horne, chief executive of the National Cyber Security Centre, in a warning earlier this year. Iran has also been accused of other cyberattacks, including a major power outage in Turkey in 2015 and breaches of Israeli government websites in 2022. US security agencies announced in August that they had charged 17 Iranians with conducting a cyber theft campaign on behalf of the IRGC. Tehran has also been a target: in June, blockchain analytics firm Elliptic said Iran's largest cryptocurrency exchange, Nobitex, was hacked for more than $90 million, with a pro-Israel hacking group claiming responsibility.
UK authorities have said they briefed energy company executives and advised firms on next steps, and are updating cybersecurity regulations to address the evolving threat.