Iranian Hackers 'Shut Down British Power Plant for Four Days' in Major Cyberattack

Hackers linked to Iran reportedly succeeded in shutting down a small British power-generating facility for four days in what security officials and industry sources are describing as an unprecedented cyberattack on UK energy infrastructure.

The incident, which reportedly occurred in July 2026, has raised fresh concerns about the vulnerability of Britain's energy infrastructure to state-linked cyberattacks.

Small Power Plant Targeted

According to reports, the affected facility was a small-scale gas-fired "peaker" plant, believed to have a capacity of around 15 megawatts. The facility was reportedly taken offline following the cyberattack and remained unavailable for approximately four days while engineers worked to restore operations.

British authorities have not publicly identified the facility, citing security concerns.

Importantly, officials stressed that the incident did not threaten Britain's wider electricity supply. The facility was not considered critical to the national grid, and there was no nationwide power disruption.

First Known Iranian Cyberattack to Shut Down a UK Power Facility

The incident is significant because it is reportedly the first known successful Iranian-linked cyberattack to physically force a UK electricity-generation facility offline.

Cybersecurity experts have increasingly warned that Iranian-linked groups are capable of targeting industrial control systems used by utilities and other critical infrastructure.

The attack has also prompted Britain's National Cyber Security Centre (NCSC) to engage with energy companies and provide guidance aimed at preventing similar incidents.

Growing Iranian Cyber Threat

The reported attack comes amid heightened tensions between Iran and Western countries and follows other cyber incidents attributed or suspected to be linked to Iranian actors.

Iran-linked groups have previously been accused of targeting industrial control systems, including programmable logic controllers (PLCs) used in infrastructure facilities. US authorities have also previously linked the CyberAv3ngers group to attacks against critical infrastructure.

The UK incident reportedly occurred around the same period as cyberattacks against water infrastructure in several US states, which investigators have also suspected of involving Iran-linked actors.

Britain on High Alert

The incident has increased pressure on British energy companies to strengthen their cybersecurity defenses.

Experts warn that smaller energy facilities can sometimes be attractive targets because they may have fewer cybersecurity resources while relying heavily on internet-connected industrial control systems.

British officials, however, have emphasized that the country's broader electricity system remains resilient and that the affected facility's shutdown did not put the national power supply at risk.

What This Means

The four-day shutdown represents a significant warning about the potential consequences of cyber warfare. While the attack did not knock out Britain's national electricity grid, the ability to remotely disrupt an electricity-generating facility demonstrates how cyberattacks can increasingly have physical consequences.

The incident is likely to accelerate efforts by British authorities and energy companies to protect power stations, industrial control systems and other critical infrastructure from state-sponsored cyber threats.

Note: Reports currently describe the attackers as Iran-linked, rather than providing publicly disclosed forensic evidence proving that the Iranian government directly ordered the attack. The attribution remains an important distinction as investigations continue.