Iran-linked hackers allegedly shut down a small British power generator for four days

Iran-linked hackers allegedly shut down a small British power generator for four days, marking what could be the UK's first cyberattack targeting an energy facility. The attack, which occurred last month, did not impact Britain’s wider electricity grid or cause power loss, according to Energy Minister Michael Shanks. The targeted generator was described as "tiny" compared to standard power plants, and is one of thousands of small-scale, often gas-fired generation sites connected to the UK grid, many operating only a few hours weekly.

The incident coincided with a series of cyberattacks on water infrastructure in 12 US states. The attack may have been a demonstration of capability by hackers linked to Iran’s Islamic Revolutionary Guard Corps (IRGC), showing their ability to penetrate and disrupt UK energy systems. The National Cyber Security Centre (NCSC) has warned of increasing disruptive cyber activity by state and non-state actors against UK organisations, urging enhanced cybersecurity measures.

Minister Shanks emphasized the government’s cybersecurity strategy for the energy sector and upcoming resilience plans for 2026. "Our energy sector cybersecurity strategy sets out how we are working to enhance cybersecurity," Shanks said. "Later in 2026 our wider energy resilience strategy will go further to secure us against a wide range of risks and ensure our resilience for the future."