A minor power generation facility in the United Kingdom experienced a four-day operational shutdown in July following a cyberattack. The incident has been linked by The Telegraph newspaper to hackers with alleged connections to Iran.
This event occurred concurrently with advisories from U.S. authorities, including the FBI, regarding malicious cyber activities targeting water treatment facilities across several American states. The Cybersecurity and Infrastructure Security Agency (CISA), FBI, and other U.S. agencies have attributed these threats to Iran.
A spokesperson for the UK government declined to officially assign blame for the power disruption or disclose the identity of the affected facility. The spokesperson emphasized to CNBC that the incident involved a "small-scale energy generator" and posed "no risk to the wider energy system," highlighting the UK's robust energy infrastructure and commitment to high security standards.
The Department for Energy Security and Net Zero in the UK stated it had informed energy sector leaders and issued guidance to companies. The department also indicated that it is in the process of updating its cybersecurity regulations.
Cybersecurity experts had previously cautioned about potential online attacks originating from Iran against U.S. businesses and infrastructure, particularly after the U.S. and Israel initiated military action against Iran on February 28th. In a separate development on August 18th, the U.S. Department of Justice charged 17 Iranian individuals for orchestrating an extensive cyber theft operation on behalf of the Islamic Revolutionary Guard Corps (IRGC) and other Iranian entities.
It is worth noting that Iran has also been the target of cyberattacks. In June, the cryptocurrency exchange Nobitex, reportedly Iran's largest, was subjected to a hack resulting in losses exceeding $90 million. Blockchain analytics firm Elliptic suggested the attack was politically motivated, with funds diverted to wallets displaying anti-government messages referencing the IRGC. The pro-Israel hacking group Gonjeshke Darande, also known as "Predatory Sparrow," claimed responsibility for this incident.
