Iranian Hackers Shut UK Power Plant for 4 Days in Unprecedented Attack

KEMETIC MINDS
Infrastructure Watch — Daily Update — August 23, 2026

---

For the first time, hackers linked to Iran have forced a British power plant offline — holding the facility down for four days before crews could restore it, according to reporting first published by The Telegraph. The unprecedented breach lands as U.S. water and power systems face an intensifying cyber threat picture, including new warnings that AI-generated attack code is now aimed at the industrial controllers that run treatment plants and the grid (Ynetnews, 2026; The Tech Edvocate, 2026).

• Hackers linked to Iran forced a British power plant offline for four days in what is believed to be the first successful Iranian cyberattack to take down a UK electricity-generating facility (Ynetnews, 2026; The Times of Israel, 2026).
• British authorities refused to name the plant, saying the “very small scale site” was “less than a rounding error compared to grid capacity” (The Jerusalem Post, 2026).
• The breach coincided with a wave of cyberattacks on U.S. water infrastructure that hit facilities in 12 states last month, with one report citing over 30 municipal water systems in Minnesota and other states (Ynetnews, 2026; The Jerusalem Post, 2026).
• NCSC head Dr. Richard Horne has warned that hostile states launch around four significant cyberattacks against Britain each week (The Independent, 2026).
• U.S. officials have issued severe warnings that AI-generated exploit scripts are now targeting Siemens S7 PLCs, the controllers behind water treatment plants and power distribution networks (The Tech Edvocate, 2026).
• President Donald Trump said in late July he did not believe Iran was behind the U.S. water attacks, a view challenged by threat researchers at Dataminr and Dragos (The Jerusalem Post, 2026).

---

1. Power Supply: Unprecedented Shutdown of a UK Plant

Hackers linked to Iran shut down a British power plant for four days in what is believed to be the first successful Iranian cyberattack to force a UK electricity-generating facility offline (Ynetnews, 2026; The Times of Israel, 2026). The attack, which took place in late July, did not disrupt Britain’s broader electricity supply because the facility was relatively small (The Jerusalem Post, 2026; Ynetnews, 2026).

British authorities have declined to identify the plant, citing security concerns, and staff spent four days working to restore the facility after the breach (Ynetnews, 2026). “It’s a very small scale site, less than a rounding error compared to grid capacity,” a government source told The Telegraph (The Jerusalem Post, 2026).

Following the breach, the government briefed energy company executives and sent businesses guidance on cybersecurity precautions (Ynetnews, 2026). The incident was reported to Britain’s National Cyber Security Centre, whose head, Dr. Richard Horne, has warned that hostile states target Britain with around four significant cyberattacks each week (The Independent, 2026).

A government spokesperson said the UK has a “highly resilient energy system,” stressing that “at no point was there a risk to the wider energy system” (The Jerusalem Post, 2026). According to The Telegraph, no previous hacking operation is believed to have successfully brought a UK power plant to a standstill (Ynetnews, 2026).

---

2. Water Supply: U.S. Systems in the Crosshairs

The UK breach occurred around the same time as a wave of cyberattacks against U.S. water infrastructure that affected facilities in 12 states last month and prompted concern at the White House (Ynetnews, 2026). The Jerusalem Post, citing The Telegraph, reports the same campaign targeted over 30 municipal water systems in Minnesota and several other states (The Jerusalem Post, 2026).

President Donald Trump said in late July he did not think Iran was behind the U.S. attacks (The Jerusalem Post, 2026). Joe Slowik, director of threat research for Dataminr, told The Washington Post that similar attacks have occurred in water and energy systems across the U.S. since the beginning of the war with Iran: “There have been disruptions in multiple critical infrastructure sectors. It’s a big deal” (The Jerusalem Post, 2026).

Kurt Gaudette, head of intelligence for Dragos, said the attacks have generally hit “very low-hanging fruit” — vulnerable systems such as small utilities that used default passwords and whose controllers were open to the internet (The Jerusalem Post, 2026).

Meanwhile, the U.S. government has issued severe warnings that AI-generated exploit scripts are now actively targeting critical infrastructure, specifically Siemens S7 PLCs — the digital brains behind manufacturing plants, water treatment facilities, and energy distribution networks (The Tech Edvocate, 2026). The report says AI can now autonomously generate functional exploit code against industrial control systems in minutes, a task that previously demanded highly specialized knowledge and weeks or months of research (The Tech Edvocate, 2026).

---

3. What’s Disputed or Unconfirmed

Attribution of the UK plant breach to Iranian state-linked hackers rests on The Telegraph’s reporting; British officials have not publicly identified the facility or the attackers, and the exact date is given only as late July (Ynetnews, 2026; The Jerusalem Post, 2026). A British government source also said the site was below legal notification thresholds for cyber activity (The Jerusalem Post, 2026).

President Donald Trump said in late July he did not think Iran was behind the U.S. water-system attacks — a position at odds with the assessments of analysts at Dataminr and Dragos quoted above (The Jerusalem Post, 2026).

The account of AI-generated exploit code targeting Siemens S7 PLCs cites U.S. government warnings but comes from a single outlet, with no independently verified technical analysis or named government advisory detailed in the sourcing (The Tech Edvocate, 2026).

---

🛡️ Free Preparedness Guides

Two free, printable checklists you can download and keep on hand — one for water-supply
disruptions, one for power outages.

---

References

1. Ynetnews. (2026, August 23). Report: Iranian hackers shut UK power plant for four days in unprecedented cyberattack. ynetnews.com
2. The Jerusalem Post. (2026, August 23). 'Unprecedented' cyberattack on UK power plant caused by hackers linked to Iranian regime – report – The Jerusalem Post. jpost.com
3. Thetechedvocate. (2026, August 23). Sinister AI: Rogue Models Now Targeting Power Grids, Water Treatment Plants. thetechedvocate.org
4. The Times of Israel. (2026, August 23). Iranian hackers shut down small UK power plant for days — report. timesofisrael.com
5. The Independent. (2026, August 23). Iranian hackers force UK power plant offline for days. independent.co.uk

---