Iran Hackers Took UK Power Plant Offline for 4 Days

KEMETIC MINDS
Infrastructure Watch — Daily Update — August 25, 2026

---

Iranian-linked hackers are reported to have done what is believed to be a first in the U.K.: successfully knock a power plant offline. The same campaign is tied to intrusions on water systems in a dozen U.S. states. Here’s the latest reporting and what remains unconfirmed.

Key Takeaways

• Iran-linked hackers knocked a U.K. power plant offline for four days (Cybernews, 2026). British media report it as the first time such a facility has been shut down in the country (CBS News, 2026).
• The breach took place in July and is only now being reported, via The Telegraph and the Financial Times (CBS News, 2026).
• The same month, Iranian-linked actors are believed to have hit water systems in a dozen U.S. states, including New Jersey, Minnesota, Georgia and South Dakota, locking out operators and causing pressure loss and flooding (CBS News, 2026).
• Both attacks targeted programmable logic controllers (PLCs) — the automated brains of industrial systems — and researchers say the breach methods were not sophisticated (CBS News, 2026).
• CISA says Iranian-linked actors are using simple techniques, including scanning for exposed devices and exploiting default credentials (CBS News, 2026).
• Iran-linked hackers have vowed to target U.S. allies as their campaign moves beyond American critical infrastructure (Cybernews, 2026).

1. Water Supply

The same month the U.K. plant was breached, Iranian-linked hackers are believed to have targeted water systems in a dozen U.S. states, including New Jersey, Minnesota, Georgia and South Dakota (CBS News, 2026). In those incidents, operators were locked out and systems suffered pressure loss and flooding (CBS News, 2026).

Both the U.S. water intrusions and the U.K. power plant attack centered on programmable logic controllers, or PLCs — the automated “brains” of industrial systems that in large part span energy, water and manufacturing (CBS News, 2026). Industry estimates of how many PLCs are in use worldwide vary widely, from roughly 12 million to more than 70 million (CBS News, 2026).

Separately, a Newsweek report published Monday quotes an expert warning that the risk of water supply poisoning via an AI-driven cyberattack is real (Silverman, 2026).

---

2. Power Supply

Iran-linked hackers knocked a U.K. power plant offline for four days, according to Cybernews (2026). The Telegraph and the Financial Times report the attack happened in July and is only now coming to light — and that it is believed to be the first time Iranian-linked hackers have shut down such a facility in the U.K. (CBS News, 2026).

The incident targeted PLCs, the same class of equipment implicated in the U.S. water-system intrusions (CBS News, 2026). Security researchers say the methods used to breach PLCs are not sophisticated, and CISA has reported Iranian-linked actors using simple techniques such as scanning for exposed devices and exploiting default credentials (CBS News, 2026).

The hackers have also vowed to target U.S. allies, as Tehran expands its cyber campaign beyond American critical infrastructure (Cybernews, 2026). Many older PLCs still in use were built before today’s threats existed — the first model was manufactured in the late 1960s — leaving critical systems reliant on equipment never designed for 21st-century cybersecurity (CBS News, 2026).

---

What’s Disputed or Unconfirmed

The U.K.’s National Cyber Security Centre has so far neither confirmed nor denied that any hacking occurred, after CBS News sought comment (CBS News, 2026).

The Iranian attribution and the “first time” characterization both rest on reporting by The Telegraph and the Financial Times, and the sourcing describes them as beliefs rather than confirmed findings (CBS News, 2026). The same is true of the dozen-state water-system targeting, which is characterized as “believed” rather than proven (CBS News, 2026).

The Newsweek item is an expert risk assessment, not a documented attack on any specific utility (Silverman, 2026).

---

🛡️ Free Preparedness Guides

Two free, printable checklists you can download and keep on hand — one for water-supply
disruptions, one for power outages.

---

References

1. CBS News. (2026, August 24). Iran-linked hackers blamed for taking down U.K. power plant for first time, reports say. cbsnews.com
2. Newsweek. (2026, August 24). Water Supply Poisoning Risk Via AI Cyberattack Is Real, Expert Warns. newsweek.com
3. Cybernews. (2026, August 24). Iran hackers vow to target US allies after 4-day UK power plant attack. cybernews.com

---