UK Energy Cyberattack Shut Small Generator For Four Days
A small U.K. energy generator was shut for four days after a July cyberattack linked to Iran, while officials said the wider power system was not at risk.
A small U.K. power generator was shut down for four days in July after a cyberattack by hackers linked to Iran, CNBC reported, citing The Telegraph, adding another critical-infrastructure incident to a period of heightened warnings about Iranian cyber activity.
The shutdown affected a small-scale energy generator rather than the wider grid.
A U.K. government spokesperson told CNBC that the incident created no risk to the broader energy system and declined to attribute blame or identify the facility.
The Department for Energy Security and Net Zero moved the response into the operating layer.
Energy CEOs were briefed, companies received written advice on next steps, and the department is updating cybersecurity regulations for the sector.
The timing placed the U.K. incident near a separate U.S. warning about suspected Iranian cyber activity against water facilities.
U.S. cyber, law-enforcement and environmental agencies had warned that malicious actors were probing water facilities across at least seven states, with Iran identified as the responsible state actor.
Cybersecurity pressure around Iran has run in both directions.
After the U.S. and Israel launched their war on Iran on Feb. 28, cyber experts warned of potential online attacks against U.S. businesses and infrastructure.
On Aug. 18, U.S. prosecutors charged 17 Iranians over an alleged large-scale cyber theft operation tied to the Islamic Revolutionary Guard Corps and other Iranian entities.
Iranian targets have also been hit.
Blockchain analytics firm Elliptic linked a June attack on Nobitex, Iran's largest cryptocurrency exchange, to more than $90 million in drained funds, with platform wallets emptied into addresses carrying anti-government messages that referenced the IRGC.
Pro-Israel hacking group Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility for that attack.
For the U.K. energy sector, the confirmed operational consequence remains narrower than a grid emergency: a four-day shutdown at a small generator, followed by executive briefings, company guidance and a regulatory update process.
