Suspected Iran-linked cyberattack shuts down a small UK power plant for four days

On 22 August 2026, The Telegraph reported that a small UK power station had been shut down for four days by a cyberattack attributed by people familiar with the matter to hackers linked to Iran's Islamic Revolutionary Guard Corps (IRGC). The incident took place in July 2026 and was described as the first disruptive Iranian cyberattack of its kind in the United Kingdom.

A UK government spokesperson confirmed that the incident affected a "small-scale energy generator" and said that at no point was there a risk to the wider energy system. Energy Minister Michael Shanks said the incident had been reported to the National Cyber Security Centre, that his department had briefed energy company chief executives, and that it had shared further advice on how to stay secure. The government did not name the plant and has not formally attributed the attack to Iran or any other actor.

Part of a wider campaign

The UK shutdown coincided with a wave of suspected Iranian intrusions into more than 30 U.S. community water utilities in Minnesota and at least 11 other states during July and August 2026. Those attacks followed U.S. government warnings earlier in the year about Iranian targeting of energy, water and government networks, and analysts described the UK incident as a continuation of the same activity against exposed industrial control systems.

Why it matters

Although the plant was small and national power supply was not affected, the attack shows that state-linked actors are willing to cause physical disruption to European energy infrastructure, not just reconnaissance or data theft. Small generators and distributed energy sites often run internet-reachable control equipment with fewer security resources than large utilities, making them an attractive entry point for disruptive operations.