Story perspectives

Iran-Linked Hackers Shut UK Power Plant for Four Days

8/26/2026

Summary

Iranian Hackers Shutdown

Iran-linked hackers shut down a small UK power plant for four days.
It was the first confirmed Iranian cyberattack to halt a British power plant.
Officials reported the outage left the national grid unaffected while keeping the plant’s name secret.
NCSC chief Richard Horne reported handling over 200 critical-infrastructure attacks last year, about 75% state-linked.
The UK urged power firms to strengthen cyber defenses and issued guidance after the incident.

Summary

UK Cyber Bill

The Cyber Security and Resilience Bill aims to harden public-service digital defenses and is slated for law in late 2026.
The Energy Resilience Strategy, due later this year, will outline plans to keep the UK energy system secure.
Around 300 small peaker plants and distributed assets fall below cyber-reporting thresholds, creating a visibility gap.
Operators say security costs are disproportionate to the limited grid capacity contribution of these small sites.

History

Historical Context

Stuxnet, uncovered on 17 June 2010, was a US-Israel cyberweapon that infiltrated Siemens SCADA systems at Iran’s Natanz plant and destroyed roughly 1,000 centrifuges (about 10 % of the fleet). The 2024 Iranian-linked attack that knocked a UK peaker plant offline for four days echoes that precedent, accelerating Britain’s Cyber Security and Resilience Bill and Energy Resilience Strategy.

1 of 3

Iranian Hackers Shutdown

Iran-linked hackers shut down a small UK power plant for four days.
It was the first confirmed Iranian cyberattack to halt a British power plant.
Officials reported the outage left the national grid unaffected while keeping the plant’s name secret.
NCSC chief Richard Horne reported handling over 200 critical-infrastructure attacks last year, about 75% state-linked.
The UK urged power firms to strengthen cyber defenses and issued guidance after the incident.

1 / 3