Sellafield Nuclear Facility Faces Prosecution Over Cybersecurity Failings

The Office for Nuclear Regulation has initiated legal proceedings against Sellafield for alleged IT security breaches between 2019 and 2023.

Sellafield Ltd, responsible for the cleanup of Europe's largest nuclear site, is being prosecuted for alleged cybersecurity lapses.
The Office for Nuclear Regulation (ONR) cites failures in compliance with the Nuclear Industries Security Regulations 2003 over a four-year period.
There is no evidence of successful cyber-attacks, but concerns over potential breaches by hostile states prompted the investigation.
Leadership changes at Sellafield include the departure of the chief information security officer and the director responsible for safety and security.
The National Audit Office is conducting a separate investigation into risks and costs at Sellafield, with findings expected this autumn.