Cyberattack Disrupts 15 MW UK Power Plant for Four Days as OT Attack Vector Remains Unknown
Brief
A cyber incident disrupted a small UK power generation facility for about four days in July 2026, raising concerns over the security of operational technology (OT) used in energy sites.
The event did not cause consumer power outages, and the wider UK electricity network continued to operate normally.
The incident became public on August 22 after media reports claimed that hackers believed to be linked to Iran had affected a British energy facility.
The UK Department for Energy Security and Net Zero later confirmed that a cyber incident had impacted a small-scale power generator. However, authorities have not named the operator or the affected plant.
Energy Minister Michael Shanks said the generator was very small when compared with major UK power stations. Financial Times reporting identified the affected site as an approximately 15 MW gas-fired peaking plant.