Sellafield Nuclear Facility Faces Prosecution Over Cybersecurity Failings

Overview

• Sellafield Ltd, responsible for the cleanup of Europe's largest nuclear site, is being prosecuted for alleged cybersecurity lapses.
• The Office for Nuclear Regulation (ONR) cites failures in compliance with the Nuclear Industries Security Regulations 2003 over a four-year period.
• There is no evidence of successful cyber-attacks, but concerns over potential breaches by hostile states prompted the investigation.
• Leadership changes at Sellafield include the departure of the chief information security officer and the director responsible for safety and security.
• The National Audit Office is conducting a separate investigation into risks and costs at Sellafield, with findings expected this autumn.