RISI

← Back to database

Suspected Iran-linked cyberattack shuts down UK power generator for four days

Event Year
2026
Reliability
Likely But Unconfirmed
Country
United Kingdom
Industry
Power and Utilities
Attack Type
Targeted Attack

Description

In July 2026, a small-scale UK power generation facility was forced offline for four days following a cyberattack. The incident was reported by The Telegraph on August 22-23, 2026, citing unnamed sources describing suspected Iranian involvement. UK Energy Minister Michael Shanks confirmed that the incident affected "a small-scale energy generator" and that the government had briefed energy company chief executives on defensive measures, stating there had been no risk to the wider energy system. The UK National Cyber Security Centre did not publish an advisory. The facility's name, location, generation type, and the specific OT systems affected were not disclosed. Dragos CEO Robert M. Lee publicly cautioned against premature Iranian attribution, noting susceptibility to false-flag operations. No Iranian group claimed the attack, and no official attribution had been issued as of late August 2026.

Impact

Single small-scale UK power generation facility offline for four days in July 2026; UK government confirmed no impact to the wider electricity grid; financial loss and generation capacity not disclosed; no injuries or public safety incidents reported.

Sources