Overview
- A small UK power generator was taken offline for four days in July after a cyber intrusion that multiple reports say was carried out by hackers linked to Iran.
- Officials reported the incident to the National Cyber Security Centre and the Department for Energy Security and Net Zero briefed energy company chiefs and sent firms written guidance.
- The government says the affected site was a small-scale generator whose four-day outage posed no risk to the wider national electricity system and declined to name the facility for security reasons.
- The UK event occurred at the same time as a string of intrusions targeting US water infrastructure and intelligence sources and law enforcement are investigating possible cross-border links and attribution to Tehran.
- Security officials cite this case as part of rising state-linked disruptive cyber activity, note the NCSC handled more than 200 attacks on critical infrastructure last year, and say regulators and resilience rules are being tightened in response.