--- title: Iran-linked hackers shut down a UK power plant for four days description: Iran-linked hackers shut down a small UK power plant, a peaker station, for four days in July, in what is described as the first successful attack of its kind... canonical: https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Iran-linked hackers shut down a UK power plant for four days | daily.dev og:description: Iran-linked hackers shut down a small UK power plant, a peaker station, for four days in July, in what is described as the first successful attack of its kind... og:url: https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f og:image: https://api.daily.dev/og/posts/QNIdoeP3f.png og:image:alt: Iran-linked hackers shut down a UK power plant for four days og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Iran-linked hackers shut down a UK power plant for four days **[The Next Web](https://daily.dev/sources/tnw)** · 6 min read · 1 upvotes · 0 comments ## Summary Iran-linked hackers shut down a small UK power plant, a peaker station, for four days in July, in what is described as the first successful attack of its kind on British energy infrastructure. The UK government has not formally attributed the attack, and officials say there was no risk to the wider grid since the site was well below the threshold for mandatory cyber incident reporting. The outage coincided with a wave of attacks on US water utilities across a dozen states, which US agencies including CISA and the FBI have blamed on Iran, exploiting internet-connected Siemens S7 programmable logic controllers using AI-generated exploitation scripts. UK officials, including NCSC head Richard Horne, warn that attacks on critical infrastructure could rise sharply amid the ongoing Iran conflict, with the agency already handling over 200 attacks on critical national infrastructure in the past year. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What caused the recent US water utility cyberattacks across multiple states? Attacks on US wastewater treatment plants across states including Minnesota, Michigan, Georgia, South Dakota and New Jersey involved internet-connected programmable logic controllers, particularly internet-exposed Siemens S7 controllers. Federal agencies warned attackers are using AI-generated exploitation scripts to break into these systems. CISA, the FBI and the EPA attributed the activity to Iran, and the intrusions caused flooding and pressure loss requiring some residents to boil water. _Teams securing exposed industrial controllers can follow ICS threat coverage like this on daily.dev._ ### Did the UK government confirm or attribute the cyberattack on the British power plant? The UK government confirmed an incident affected a small-scale energy generator, a peaker plant, but stated there was never a risk to the wider energy system. Officials have not formally attributed the attack to Iran or any other actor, and declined to name the specific facility, citing security concerns. A government source said the site falls below the threshold requiring mandatory reporting of cyber activity. _Anyone tracking how governments confirm or attribute infrastructure attacks can follow the story on daily.dev._ ### How often does the UK's National Cyber Security Centre deal with attacks on critical infrastructure? The National Cyber Security Centre handled more than 200 attacks on critical national infrastructure in the year up to mid-2026, according to its chief Richard Horne. He also said the agency now handles at least four nationally significant attacks per week, a number he warned could rise if the UK becomes more entangled in the Iran conflict. _Security teams gauging real-world attack volume against critical infrastructure can follow updates on daily.dev._ ## Similar posts on daily.dev - [Iran-linked cyberattack shut down a UK power plant](https://daily.dev/posts/iran-linked-cyberattack-shut-down-a-uk-power-plant-zukou3pe7) · The Register · 0 upvotes · 0 comments - [Critical infrastructure’s long, undefended tail exposed by UK energy attack](https://daily.dev/posts/critical-infrastructure-s-long-undefended-tail-exposed-by-uk-energy-attack-hajfwhwyk) · CSO Online · 0 upvotes · 0 comments - [Poland Suspects Iranian Actors are Behind Attack on Its Nuclear Power Center](https://daily.dev/posts/poland-suspects-iranian-actors-are-behind-attack-on-its-nuclear-power-center-j6cswql8m) · Security Boulevard · 1 upvotes · 0 comments - [Russian hackers breached Polish power grid thanks to bad security, report says](https://daily.dev/posts/russian-hackers-breached-polish-power-grid-thanks-to-bad-security-report-says-ot56oi0pf) · TechCrunch · 0 upvotes · 0 comments --- [View this post on daily.dev](https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Iran-linked hackers shut down a UK power plant for four days","url":"https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f"},"datePublished":"2026-08-24T19:51:56.085Z","dateModified":"2026-09-13T19:33:36.735Z","description":"Iran-linked hackers shut down a small UK power plant, a peaker station, for four days in July, in what is described as the first successful attack of its kind...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b9ff2028b2844b53f43673e67217df90?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b9ff2028b2844b53f43673e67217df90?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Next Web","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Next Web","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tnw","url":"https://daily.dev/sources/tnw"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"","timeRequired":"PT6M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Next Web","item":"https://daily.dev/sources/tnw"},{"@type":"ListItem","position":3,"name":"Iran-linked hackers shut down a UK power plant for four days"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/iran-linked-hackers-shut-down-a-uk-power-plant-for-four-days-qnidoep3f#faq","mainEntity":[{"@type":"Question","name":"What caused the recent US water utility cyberattacks across multiple states?","acceptedAnswer":{"@type":"Answer","text":"Attacks on US wastewater treatment plants across states including Minnesota, Michigan, Georgia, South Dakota and New Jersey involved internet-connected programmable logic controllers, particularly internet-exposed Siemens S7 controllers. Federal agencies warned attackers are using AI-generated exploitation scripts to break into these systems. CISA, the FBI and the EPA attributed the activity to Iran, and the intrusions caused flooding and pressure loss requiring some residents to boil water. Teams securing exposed industrial controllers can follow ICS threat coverage like this on daily.dev."}},{"@type":"Question","name":"Did the UK government confirm or attribute the cyberattack on the British power plant?","acceptedAnswer":{"@type":"Answer","text":"The UK government confirmed an incident affected a small-scale energy generator, a peaker plant, but stated there was never a risk to the wider energy system. Officials have not formally attributed the attack to Iran or any other actor, and declined to name the specific facility, citing security concerns. A government source said the site falls below the threshold requiring mandatory reporting of cyber activity. Anyone tracking how governments confirm or attribute infrastructure attacks can follow the story on daily.dev."}},{"@type":"Question","name":"How often does the UK's National Cyber Security Centre deal with attacks on critical infrastructure?","acceptedAnswer":{"@type":"Answer","text":"The National Cyber Security Centre handled more than 200 attacks on critical national infrastructure in the year up to mid-2026, according to its chief Richard Horne. He also said the agency now handles at least four nationally significant attacks per week, a number he warned could rise if the UK becomes more entangled in the Iran conflict. Security teams gauging real-world attack volume against critical infrastructure can follow updates on daily.dev."}}]} ```