Overview
- In July 2026, British and international media reported hackers believed to be linked to Iran forced an unnamed small-scale UK power generator offline for four days while staff worked to restore it.
- Multiple outlets have attributed the intrusion to Iran‑affiliated groups but UK officials have not publicly confirmed attribution and formal investigations remain under way.
- The incident was reported to the National Cyber Security Centre, the Department for Energy Security and Net Zero briefed energy company chiefs and issued guidance to firms, and officials said the wider UK grid was not at risk.
- The generator outage occurred at the same time as a wave of cyber intrusions against US water systems in July that the FBI called the work of “malicious cyber actors” and US sources later said were likely to have originated in Tehran.
- Cybersecurity experts warn the case shows how greater connectivity and the use of AI lower the barrier to damaging attacks, and it could prompt faster implementation of the UK’s Energy Resilience Strategy and tougher rules in the Cyber Security and Resilience Bill to protect smaller operators and supply chains.