Iranian-Linked Hackers Shut Down UK Power Plant in July Cyberattack, Report Claims

Last updated: August 24, 2026 7:59 am

2 hours ago

1 Min Read

A small UK power generator was shut down for four days in July following a cyberattack reportedly carried out by hackers linked to Iran, The Telegraph reported. The U.K. government confirmed an incident affecting a small generator but stressed there was no risk to the wider energy system, highlighting the country’s resilient infrastructure.

This event occurred around the same time U.S. authorities warned of Iranian cyber threats targeting critical infrastructure, including water facilities.

Iranian-Linked Hackers Shut Down UK Power Plant in July Cyberattack, Report Claims

A small power generation facility in the United Kingdom was forced offline for four days in July due to a cyberattack attributed to hackers with ties to Iran, according to a report by The Telegraph newspaper.

Illustrative image of network infrastructure.

Cyberattack Coincides with US Warnings on Iranian Hacking

The incident occurred around the same time that U.S. authorities, including the FBI and the Cybersecurity and Infrastructure Security Agency (CISA), issued warnings about suspected malicious Iranian cyber actors targeting critical infrastructure. Specifically, U.S. agencies had alerted about threats to water facilities across at least seven states, attributing these activities to Iran.

UK Government Response and Energy System Resilience

A spokesperson for the U.K. government acknowledged the report, stating, "The story refers to an incident impacting a small-scale energy generator." However, the spokesperson emphasized that "at no point was there a risk to the wider energy system." They further assured that the U.K. possesses a highly resilient energy system and collaborates closely with the energy sector to maintain robust security standards. The Department for Energy Security and Net Zero confirmed it had briefed energy CEOs and updated cybersecurity regulations following the incident.

Broader Context of Cyber Threats

This reported cyberattack follows a period of heightened cyber activity linked to geopolitical tensions. Shortly after the U.S. and Israel reportedly launched operations against Iran on February 28, cyber experts had anticipated an increase in online attacks originating from Iran targeting U.S. businesses and infrastructure. In a related development, on August 18, the U.S. Department of Justice charged 17 Iranians for a large-scale cyber theft campaign allegedly conducted on behalf of the Islamic Revolutionary Guard Corps.

Iran itself has also been a target of cyberattacks. In June, blockchain analytics firm Elliptic reported that Iran's largest cryptocurrency exchange, Nobitex, was hacked, with over $90 million in funds stolen. The attack was attributed to the pro-Israel hacking group Gonjeshke Darande, also known as 'Predatory Sparrow,' which claimed responsibility and referenced anti-government messages.