Small UK power plant shut down for four days after cyber attack

A small power plant in the United Kingdom was shut down for four days after a cyber attack, according to officials. The incident affected a small-scale generator rather than a major power station, and the government said the wider energy system was never at risk. The site has not been identified for security reasons.

Sponsored

The Department for Energy Security and Net Zero said it had contacted power companies to warn them about cyber risk after the attack. The National Cyber Security Centre, which handles attacks on critical infrastructure, also declined to provide further details about the location or method used. Officials said the incident took place last month, but the disclosure was made on 23 August.

The case has drawn attention because it involved energy infrastructure, even though the disruption was limited. The UK's power network includes smaller gas generators that can provide short-term power when needed, making them part of the broader resilience of supply. Officials said this was not an attack on an essential service such as a large power station.

The government is already updating cyber-security regulations for the energy sector and working on a new energy resilience strategy later this year. That gives the incident added significance, as it comes at a time when authorities are trying to strengthen defences around critical infrastructure. The episode also underlines the challenge of protecting smaller assets that may not attract the same level of public attention as major plants.

Sponsored

A report in the Daily Telegraph said the attack was carried out by hackers affiliated with the Iranian regime, although the government and the National Cyber Security Centre did not confirm that detail. Iran has long been regarded as a capable cyber power, and Western cyber-security agencies have been alert to possible activity linked to the state. However, the available information in this case remains limited and does not identify the site or the full technical impact.

What remains unclear is the exact target, the method used, and whether any data were taken or systems were altered. Officials have not said whether the attack is part of a wider campaign or whether any arrests or further protective measures have followed. The main issue to watch is whether the incident leads to faster changes in energy cyber-security rules and more warnings to operators of smaller generators.

#cyberattack #powerplant #UnitedKingdom #energysecurity #NationalCyberSecurityCentre