Iranian-affiliated hackers reportedly forced a small UK power generator to shut down for four days last month, marking what is believed to be the first successful cyberattack of its kind on a UK facility. The incident, which did not pose a risk to the wider national grid, was reported to the National Cyber Security Centre (NCSC), part of GCHQ, according to The Telegraph.
Cyberattack on small-scale energy generator
The targeted facility was described as a “small-scale energy generator,” though its name was not disclosed by sources. The four-day shutdown occurred last month, and while the attack disrupted operations, it did not threaten the stability of the broader electricity grid. The incident was reported to the NCSC, which is responsible for responding to serious cyber incidents affecting UK organisations.
In response to the attack, the UK government issued briefings to power companies and wrote to businesses with advice on how to bolster their cyber defences. The move underscores growing concerns about cyber threats from hostile state actors targeting critical national infrastructure.
NCSC warns of state-backed cyber threats
Earlier this year, Dr Richard Horne, head of the NCSC, warned that most nationally significant cyber attacks on Britain were carried out by hostile states, including China, Iran, and Russia. He revealed that the NCSC deals with around four such attacks each week, highlighting the scale of the threat.
Dr Horne also cautioned businesses to be prepared to protect themselves against cyber attacks without relying on paying ransoms. He warned that the UK could be targeted “at scale” if it were to become involved in an international conflict, making it essential for organisations to strengthen their cyber resilience in advance.
Impact and next steps
The incident, although limited in scope, serves as a stark reminder of the vulnerabilities facing UK energy infrastructure. The government’s swift response, including advisories to power companies and businesses, aims to mitigate future risks. The NCSC continues to monitor and respond to cyber threats, with a focus on safeguarding critical national assets from state-sponsored attacks.
As the UK faces an evolving cyber threat landscape, the NCSC’s warnings highlight the need for ongoing vigilance and investment in cybersecurity measures across all sectors.
