Hackers linked to Iran have managed to shut down a British power plant for four days in an unprecedented cyberattack, The Telegraph reports. It is believed to be the first time in Britain that hackers linked to the Iranian regime have managed to shut down a power plant. The attack is also considered one of the most successful cyber incidents of its kind.
British officials have not said which power plant was affected, citing security reasons. According to The Telegraph, it is a relatively small power plant, which was out of service for four days while staff worked to restore it to operation.
The outage had no impact on Britain's overall power supply and posed no risk to the functioning of the national grid. The affected plant has a small capacity in relation to the country's energy system.
The incident was reported to the National Cyber Security Centre (NCSC), part of the British intelligence agency GCHQ. Following the attack, the government informed energy company executives and sent guidance to businesses to strengthen security measures.
According to the report, the attack occurred during the same period as a series of cyberattacks on water infrastructure in the US. The incidents affected several US states, causing flooding, reduced water pressure and, in some cases, advisories for residents to boil water before consumption.
US authorities linked the attacks to "malicious cyber actors", while US government sources later said the threat was believed to have originated in Tehran. Iran has increased its cyber activity against Western countries since the escalation of the conflict in the Middle East, especially after the launch of US and Israeli air strikes in February.
Suspected Iranian attacks have also been reported in Germany, Poland, Finland, Belgium and Albania, while Israel and other Middle Eastern countries have been among the main targets.
In March, the NCSC urged British organizations to review their security measures due to the growing cyber threat. The agency’s director, Richard Horne, said in June that the NCSC had handled more than 200 attacks on national critical infrastructure in the past year. British authorities have not publicly confirmed who was behind the attack on the plant. The NCSC has declined to comment on the incident.
Experts have long warned that Britain is vulnerable to cyberattacks from foreign states. A recent British government assessment also warned that artificial intelligence could make cyberattacks faster, more efficient and easier to carry out.
The British government has stressed that the country's energy system remains stable and that the incident did not pose any risk to the overall energy supply.