Reports say Iran-linked hackers took U.K. power plant offline for first time

U.K. officials and infrastructure operators were put on notice after reports alleged that Iran-linked hackers took a U.K. power plant offline for the first time, marking an escalation in cyber intrusions aimed at critical energy systems. The reporting, cited by CBS News, described the incident as a shutdown of power-plant operations rather than a limited intrusion or data breach, heightening concerns about disruption of electricity supply and continuity of public services.

The alleged activity was framed as part of a broader pattern of cyber operations linked to Iranian interests, with the U.K. power-plant case occurring during a period in which U.S. authorities and related reporting have discussed Iranian-linked hackers targeting water systems. CBS News said the U.K. attack happened the same month that Iranian-linked hackers are believed to have targeted the water systems of a dozen U.S. states, connecting the timing of two different critical-infrastructure threat streams.

According to the CBS News report, the U.K. incident is described as the first time such a capability was attributed to the same Iran-linked hacking efforts in connection with a power facility. The report did not present a public finding from a named U.K. agency in the material provided here, and the characterization remains reported as allegations and claims rather than an official adjudication.

Cyber intrusions involving electricity generation and grid-linked equipment can have direct public-safety implications, including risk of service interruptions for households, businesses, hospitals, and other essential services. While the CBS News report focused on the allegation that the plant was taken offline, the practical effects for customers, duration of any outage, and specific systems affected were not detailed in the supplied summary and cannot be asserted here.

The U.K. allegation also comes as governments in Europe and North America have increased attention to foreign-linked cyber activity affecting critical infrastructure, including utilities, energy management networks, and operational technology. In the U.S., reporting has also pointed to suspected Iranian-linked efforts against water systems, an area that relies on tightly controlled operational processes and rapid incident response to maintain treatment performance and safety.

For now, the key next steps are likely to be technical verification and public accountability. That includes determining how the intrusion entered the environment, what systems were affected, whether operators detected and contained it before damage spread, and what remediation actions are required to prevent recurrence.

Regulators and affected operators typically respond to incidents like these by reviewing access controls, patch management, segmentation between corporate and operational networks, and monitoring for malicious activity. Government statements, if any, and the publication of findings by investigators would help clarify what was actually disrupted in the U.K. power plant and how it relates to the broader Iran-linked cyber threat picture described in current reporting.