'Unprecedented' cyberattack on UK power plant caused by hackers linked to Iranian regime
Hackers linked to the Iranian regime disabled a 15 MW UK power generation facility for four days in July 2026. The attackers targeted the plant's programmable logic controller (PLC) to force the system offline. This incident highlights a growing wartime cyber tactic where actors exploit internet-connected industrial equipment at small facilities. These smaller sites often lack the funding and personnel required for robust defense, leaving a gap in the security of the national power network. UK energy companies remain on high alert to secure critical infrastructure against similar disruptions.
What changed
New reports identify the targeted facility as a 15 MW plant and specify the PLC as the point of attack.
Live updates
-
Iran-linked hackers targeted PLC of 15 MW UK power plant
Hackers linked to the Iranian regime disabled a 15 MW UK power generation facility for four days in July 2026. The attackers targeted the plant's programmable logic controller (PLC) to force the system offline. This incident highlights a growing wartime cyber tactic where actors exploit internet-connected industrial equipment at small facilities. These smaller sites often lack the funding and personnel required for robust defense, leaving a gap in the security of the national power network. UK energy companies remain on high alert to secure critical infrastructure against similar disruptions.
Why it matters
The attack represents a shift toward targeting the undefended tail of critical infrastructure. Small-scale generators are more vulnerable than major plants but can still signal systemic weaknesses. The use of AI is reportedly making these types of attacks faster and cheaper to execute.
What is confirmed
- Iran-linked hackers took a UK power plant offline for four days in July 2026.
- The cyberattack targeted the facility's PLC.
- The disrupted power generation facility has a capacity of 15 MW.
Still unconfirmed
- AI is making similar cyberattacks faster and cheaper.
- The attack is part of a wartime tactic targeting small facilities that lack money and staff for defense.
- The specific OT attack vector remains unknown.
What to watch next
- Identification of the specific facility name
- Government reports on the role of AI in the breach
- Updates on security upgrades for small-scale UK energy generators
confidence 90%Sources used for this update (5)
- www.yahoo.com — Iran-Linked Hackers Took a UK Power Plant Offline – AI Is Making the Next Attack Easier
- www.csoonline.com — Critical infrastructure’s long, undefended tail exposed by UK energy attack
- cyberpress.org — Cyberattack Disrupts 15 MW UK Power Plant for Four Days as OT Attack Vector Remains Unknown
- jen.jiji.com — Bus broken down in Florence, passenger beats the driver and threatens him: "Drive or I'll kill you"
- jen.jiji.com — Burioni: "Borghi sued me for opinions on his political actions"
-
Iran-linked hackers disabled UK power plant for four days in July
Hackers linked to the Iranian regime forced a small UK power plant offline for four days during July. The Telegraph attributed the cyberattack to these actors, describing the breach as unprecedented. The incident has triggered a high alert across UK energy companies to secure the national power network against similar disruptions. While the attack is confirmed, the specific identity of the targeted facility remains undisclosed.
Why it matters
This breach targets critical national infrastructure, raising concerns about the vulnerability of the UK energy grid to state-sponsored cyber warfare. It occurs amid broader geopolitical tensions involving Iran and Western powers.
What is confirmed
- Hackers linked to the Iranian regime shut down a small UK power plant.
- The facility remained offline for four days.
Still unconfirmed
- The cyberattack took place in July.
- The Telegraph attributed the attack to Iran-linked hackers.
What to watch next
- Official identification of the targeted power plant
- UK government attribution or formal sanctions against Iranian entities
- Reports on the specific vulnerabilities exploited during the breach
confidence 80%Sources used for this update (4)
- timesofindia.indiatimes.com — US Iran War News Live Updates: US Iran War | Iran says Gulf states hosting US bases backed attack, may pursue legal action
- www.jpost.com — United States
- www.techdigest.tv — Nvidia’s debt pile alarms traders, Iran hackers shut down UK power plant
- thenextweb.com — Iran-linked hackers shut down a UK power plant for four days
-
Iran-linked hackers shut down small UK power plant
Hackers linked to the Iranian regime shut down a small UK power plant in a cyberattack described as unprecedented. The attack forced the energy facility to remain closed for four days. Following the breach, UK energy companies have been placed on alert to prevent similar disruptions across the national power network. While several outlets report the shutdown, the specific identity of the targeted plant has not been disclosed.
Why it matters
This event marks a rare instance of a foreign state-linked actor successfully disabling physical energy infrastructure in the UK. It highlights vulnerabilities in the national power grid against targeted cyber warfare.
What is confirmed
- Hackers linked to the Iranian regime shut down a UK power plant.
- The cyberattack is described as unprecedented.
- UK energy companies are on alert following the attack.
- The targeted facility was a small power plant.
Still unconfirmed
- The Iranian hackers forced the energy facility to shut for four days.
What to watch next
- Official attribution from the UK government
- Details on the specific power plant targeted
- Evidence of similar intrusions at other energy sites
confidence 90%Sources used for this update (8)
- The Jerusalem Post — 'Unprecedented' cyberattack on UK power plant caused by hackers linked to Iranian regime - report
- The Telegraph — Iranian hackers shut down UK power plant
- Financial Times — UK energy companies on alert after Iran-linked hackers shut down power plant
- BBC — Iran-linked hackers behind cyber attack that shut down power plant, reports say
- The Independent — Iranian hackers carry out unprecedented attack on UK’s power network
- The Guardian — Iran-linked hackers blamed for cyber-attack that shut down UK power plant
- The Times — Iranian hackers forced UK energy facility to shut for four days
- CNBC — Small UK power plant shut down after cyberattack linked to Iran: Telegraph