UK officials say small power plant shut after Iran-linked cyberattack, no threat to national energy system

U.K. authorities said a small power plant was shut down following a cyberattack that was linked to Iran, according to a report published Monday by The Telegraph. The paper described the disruption as limited to the affected site, with government officials emphasizing that the incident did not create an electricity risk for the broader national energy system.

The U.K. government response focused on assessing operational impact and reducing the chance of follow-on damage. Officials told sector leaders that the specific incident did not translate into a wider threat to power supplies, the report said, and that companies should follow advice issued in connection with the event.

According to The Telegraph, the government briefed chief executives of companies operating in the energy sector. The briefings were intended to share the status of government assessments and to reinforce recommended steps for cyber preparedness, including controls designed to prevent disruption from spreading beyond the initially impacted network or asset.

The report also said the government characterized the incident as having been linked to Iran. While the publication did not detail publicly the technical basis for that attribution in its account, the government’s involvement indicates that national security and cyber-defense authorities were engaged in the assessment process.

The episode comes as energy infrastructure has remained a major focus of government cybersecurity work in the U.K. and across Europe. Even when attacks do not affect grid-scale operations, temporary shutdowns at individual facilities can have localized consequences for customers, workers, and electricity market operations depending on how quickly the facility can be restored.

U.K. officials said the incident did not pose a risk to the country’s energy system, which indicates that assessments concluded the wider grid would not be destabilized. The immediate public message, as described by The Telegraph, was designed to reassure households and businesses while the site-specific issue was addressed and additional monitoring was carried out.

For the companies involved, the practical next steps include compliance with any government cyber guidance and continued coordination with national incident-response structures. If further evidence emerges, authorities could update their assessments, but for now the stated position is that the impact was constrained and that the national energy system remained protected.

The U.K. government’s statements, as relayed by The Telegraph and reported by CNBC, place the episode in a broader pattern of cyber activity targeting critical infrastructure, where authorities typically balance transparency with the need to protect sensitive details. Investors, regulators, and the public will be watching for any additional information about the affected facility, remediation timelines, and whether any further sector-wide measures were triggered.