A small U.K. power plant was taken offline for four days in July after a cyberattack reportedly linked to hackers tied to Iran, according to The Telegraph. The incident was not considered a threat to the wider U.K. energy system, according to the government.
U.K. Government Declines To Assign Blame
A government spokesperson declined to identify the facility or confirm who was behind the attack. The government said the incident affected a small-scale generator and did not threaten the wider energy system.
Follow THE FUTURE on LinkedIn, Facebook, Instagram, X and Telegram
“The U.K. has a highly resilient energy system. We work closely with the energy sector to protect infrastructure and ensure the highest security standards,” the spokesperson told CNBC.
The Department for Energy Security and Net Zero said it had briefed energy executives and written to companies about further measures. The department is also updating cybersecurity regulations for the energy sector.
U.S. Agencies Warned Of Iranian Cyber Activity
The reported attack came as U.S. authorities warned that Iranian cyber actors were targeting critical infrastructure. The Cybersecurity and Infrastructure Security Agency, FBI, Environmental Protection Agency and other agencies said Iranian actors had targeted water facilities across at least seven U.S. states.
U.S. officials have also warned that Iranian cyber groups could target businesses and infrastructure in response to the conflict between the U.S., Israel and Iran.
On Aug. 18, the U.S. Department of Justice charged 17 Iranians over what it described as a “massive cyber theft campaign” carried out on behalf of the Islamic Revolutionary Guard Corps and other Iranian entities.
Iran Has Also Faced Cyberattacks
Iran has also been targeted by major cyberattacks. In June, blockchain analytics firm Elliptic said hackers stole more than $90 million from Nobitex, Iran’s largest cryptocurrency exchange.
According to Elliptic, the funds were moved from Nobitex wallets to addresses containing messages referencing the Islamic Revolutionary Guard Corps. The pro-Israel hacking group Gonjeshke Darande, also known as Predatory Sparrow, claimed responsibility for the attack.
The reported U.K. incident adds to a series of cyberattacks involving critical infrastructure and state-linked actors. Energy companies and other infrastructure operators are facing growing pressure to strengthen defenses as cyber operations become increasingly tied to geopolitical conflicts.
