Iran-linked hackers shut down UK power plant in cyber attack last month

A small power plant in the United Kingdom was forced offline during a cyber attack last month, the British government has confirmed. The Department for Energy Security and Net Zero (DESNZ) said the plant was shut down for four days, though at no point was there a risk to the country's wider energy system.

Iran-linked hackers blamed

The Daily Telegraph reported that the attack was carried out by hackers affiliated with the Iranian regime. For security reasons, neither the government nor the National Cyber Security Centre (NCSC) disclosed the location of the affected site. DESNZ confirmed the incident involved a small-scale gas generator — the type used to provide short-term power when needed.

UK energy companies alerted

Following the incident, DESNZ contacted energy companies to advise them about the nature of the attack, signalling concerns that similar infrastructure could be targeted. The UK is in the process of updating its regulations for cyber security in the energy sector and is developing a new energy resilience strategy, expected later this year.

Iran is widely regarded as a capable cyber power. While Western governments brace for attacks from Tehran or state-linked hackers — particularly in the context of Iran's regional conflicts — the UK's energy infrastructure has rarely been directly targeted in this way.