An energy generation facility in the United Kingdom was forced to halt operations for four days following a cyberattack reportedly carried out by Iran-linked hackers, marking the first known incident of its kind against UK energy infrastructure.

The incident is reportedly the first known case in which Iran-linked cyber actors succeeded in disrupting the operations of an energy facility in the UK.

Authorities have not disclosed the name or location of the facility, citing security concerns. Officials only confirmed that the target was a small-scale energy generation site.

Energy companies warned after attack

Following the incident, the UK government informed energy sector executives about the attack and issued cybersecurity guidance to companies operating critical infrastructure.

The incident was also reported to the National Cyber Security Centre (NCSC). NCSC Chief Executive Richard Horne has previously warned that cyber actors linked to Iran, China and Russia are among the main threats targeting critical infrastructure in the UK.

Horne said the agency deals with around four serious cyber incidents every week.

The British government said efforts to strengthen the cybersecurity of energy infrastructure are continuing, with a broader energy resilience strategy expected to be announced later in 2026.

Attack coincided with incidents in US

The UK incident came at a time when suspected Iran-linked cyberattacks targeting water and wastewater infrastructure in several US states were also reported.

Reports indicated that water systems in 12 US states had been targeted in the attacks, raising concerns over the ability of Iran-linked cyber groups to target critical infrastructure in Western countries.(ILKHA)