Iran-linked cyber attack disrupts UK energy generator

Energy minister Michael Shanks has addressed a cyber incident linked to Iran that resulted in the shutdown of a British small-scale energy generator for four days last month. The attack, which occurred in July, was reported by the Sunday Telegraph and led to a temporary cessation of operations at the facility. The Department for Energy Security and Net Zero has stated that the incident did not pose a risk to the wider energy system, emphasising the resilience of the national grid.

Shanks issued a statement clarifying that the reporting relates to a cyber incident affecting a small-scale generator. He confirmed that there was no threat to the wider grid and that no consumers lost power. The minister described the UK as having one of the most resilient energy systems in the world. He noted that both the targeted generator and the government took the incident seriously, describing the affected facility as tiny compared to a regular power station. The incident is viewed as an escalation in the threat posed by Iran, particularly following the UK’s recent permission for the US to launch defensive operations from UK bases against Tehran.

Graeme Stewart, head of the public sector at Israeli cyber security firm Check Point, termed the incident a grave escalation. He argued that it should concern every organisation responsible for keeping the country running. Stewart highlighted that while the wider grid was unaffected, the attackers demonstrated an ability to access UK energy infrastructure and stop it working. He questioned what would happen if a future target were larger, more critical, or more deeply connected to essential services. Patrick Sullivan, chief executive of think tank Parliament Street, stated that the conflict has arrived on British soil and predicted further cyber attacks. He urged President Trump to continue exerting pressure in the Middle East to signal readiness to hostile foreign powers.

Government officials have briefed the energy sector on security measures. Shanks, who chairs the Energy Resilience and Security Taskforce, said that cyber engagement has increased in recent months. He confirmed that energy CEOs were briefed after the incident and that further advice was shared with companies on maintaining security. The government works continually with industry, regulators, and the National Cyber Security Centre to assess threats and strengthen protections. The government’s Energy Sector Cyber Security Strategy will define the approach to tackling cyber security, while the wider Energy Resilience Strategy, due later this year, will address resilience further.

Simon Edwards, chief at cyber criminal vulnerability testing lab SE Labs, warned that the attack underlines the real threats cyber warfare poses to critical national infrastructure. He noted that hostile nation states have the resources to fund similar attacks in the future, urging the UK’s energy network to ramp up defences immediately. In March, the Department for Energy Security and Net Zero stated that the UK benefits from strong and diverse energy supplies, including North Sea production, pipelines with Norway, interconnectors with continental Europe, and three LNG terminals. The department noted that only about one per cent of the UK’s gas supply in 2025 came from Qatar and expected this to remain stable. The government identified reliance on unstable fossil fuel markets as the biggest threat to energy security, highlighting its investment in domestic clean power.