Overview
- A small UK power generator was taken offline for four days in late July after a cyber intrusion that multiple outlets have attributed to hackers linked to the Iranian regime.
- The National Cyber Security Centre was notified and declined to comment on the specific incident while the UK government briefed chief executives of power companies and sent businesses technical advice.
- Officials say the targeted site was a relatively small, intermittently used generator and that the outage did not threaten the wider national grid or cause nation‑wide blackouts.
- The UK outage occurred at the same time U.S. municipal water and wastewater systems suffered breaches across multiple states that U.S. sources have linked to Iranian‑affiliated actors, signaling a cross‑border campaign against smaller utilities.
- Security leaders note rising state‑linked cyber activity since 2023, the NCSC handled more than 200 attacks on critical infrastructure last year, and a recent Cabinet Office risk assessment warned that AI and automation can speed and lower the cost of such attacks.