Iranian Hackers Shut UK Power Plant: 4-Day Attack Explained

Iranian hackers shut down a UK power plant for four days last month in what security analysts describe as the first successful state-linked cyberattack against British energy infrastructure, according to The Telegraph. British authorities have declined to identify the affected site, but the government confirmed that the incident posed no risk to national electricity supply.

What happened at the UK power plant?

The cyberattack took the small generating station offline for four days, forcing staff to restore operations manually. The incident was reported to the UK National Cyber Security Centre (NCSC), which declined to comment on the facility's identity for security reasons. “At no point was there a risk to the UK's energy system,” a spokesperson for the Department for Energy Security and Net Zero said, while power company executives were briefed on the attack.

Because the outage did not disrupt the wider grid, officials believe the targeted plant was a small-scale generator rather than a major power station. The attack is being treated as a proof-of-concept demonstration, with analysts pointing to the Islamic Revolutionary Guard Corps (IRGC) rather than an attempt to harm civilians. The rise in attacks on critical national infrastructure cybersecurity has prompted renewed warnings from British intelligence.

Why does this cyberattack matter?

It is the first time hackers linked to the Iranian regime have successfully disrupted a UK energy facility. The incident coincided with a wave of cyberattacks on water systems in the United States, which affected facilities in 12 states and allowed untreated groundwater to enter some pipelines. The FBI said drinking water was not contaminated, but the coordinated timing suggests Tehran is testing Western defenses.

Unlike the Jaguar Land Rover production shutdown in 2025, which cost nearly £200 million and dented the UK economy by about £2 billion, the power plant attack caused no major economic damage. Still, it highlights how vulnerable energy infrastructure can be to state-sponsored hacking.

What are the implications for UK energy security?

The UK is updating its cyber security regulations and developing a new energy resilience strategy. A Cabinet Office assessment puts the probability of a serious cyberattack on domestic infrastructure at between 5% and 25%. The latest incident may force faster action on European energy infrastructure protection and closer cooperation between the UK and US on intelligence sharing.

Iran-linked attacks at a glance

Frequently Asked Questions

Who carried out the UK power plant cyberattack?

Hackers linked to the Iranian regime, likely the Islamic Revolutionary Guard Corps, are suspected of carrying out the attack, according to The Telegraph and British intelligence assessments.

Was the UK electricity supply affected?

No. Officials confirmed the attack affected only a small power plant and posed no risk to the national energy system.

Did the attack affect drinking water?

No. The FBI said drinking water was not contaminated in the concurrent US water system attacks, although untreated groundwater entered some pipelines.

What is the UK doing to prevent future attacks?

The UK is updating cyber security rules, briefing power company executives, and developing a new energy resilience strategy to reduce the risk of state-sponsored hacking.