Iranian-linked cyberattack disables British power facility

A small-scale power generation facility in the United Kingdom was forced offline for four days last month following a cyberattack allegedly orchestrated by hackers with ties to Iran. Reports confirm this marks the first instance of Iran-linked actors successfully disabling a power production unit, though British authorities emphasized that the site is not considered critical infrastructure and the incident did not disrupt the national grid or overall energy supply.

The attack occurred during a broader period of malicious digital activity, coinciding with strikes against water infrastructure systems across twelve U.S. states. The U.S. incidents have been attributed to the CyberAv3ngers group, which American officials claim is affiliated with the Iranian Revolutionary Guard Corps. Additionally, the U.S. Department of Justice recently indicted seventeen Iranian nationals for a coordinated campaign aimed at stealing data from various American organizations.

In response to the British incident, the National Cyber Security Centre and the Department for Energy Security and Net Zero have issued formal guidance to energy sector management. Companies have been instructed to bolster their defenses to prevent future breaches. Authorities have withheld the specific location of the affected facility citing national security concerns.