Iranian Hackers Shut Down UK Power Plant for Four Days

Iran-linked hackers forced a small UK power generator offline for four days in late July. British officials call it the first successful shutdown of an energy facility in the UK by Iranian-affiliated actors.

• 4 days: the length of the outage while staff worked to restore systems.
• British officials did not name the facility, citing security concerns.
• 30+ community water systems in Minnesota alone were hit in a concurrent US campaign.
• Cabinet Office research puts the risk of a serious infrastructure cyber attack at 5–25%.

Why it matters: The attack is the first of its kind in the UK, but the government says the facility was too small to threaten the national grid.

• A British government source told the Telegraph the site is "nowhere near" legal notification thresholds and amounts to "less than a rounding error compared to grid capacity."
• Joe Slowik, director of threat research at Dataminr, said disruptions across US water and energy systems have been ongoing since spring and called the pattern "a big deal."

How 19 sources split on this story

Where they split: Coverage agrees on the basic facts but splits on emphasis: whether the attack's small scale makes it a minor incident or a significant escalation signaling future risk.

What’s next: The NCSC is investigating; the government has briefed power company CEOs and issued guidance.

• GCHQ is developing an AI cyber shield intended to protect critical infrastructure within five years.
• Which specific facility was targeted, and how hackers gained access, has not been disclosed.
• Whether the UK and US attacks were coordinated by the same Iranian group remains unconfirmed.
• US President Trump said in late July he did not believe Iran was behind the US water-system attacks; no updated official US attribution has been reported.