# UK critical energy infrastructure cyberattack > Live situation record from CLSTR: https://clstr.news/situations/uk-critical-energy-infrastructure-cyberattack > Updated: 2026-08-25T04:37:00.000Z. Sources: 16. Developments: 3. A cyberattack, reportedly linked to the Iranian regime, targeted a small ‘peaker’ power generation facility in the United Kingdom, forcing it offline for four days. While the incident did not impact the national electricity supply or the broader grid, it has highlighted vulnerabilities within decentralized energy networks and critical national infrastructure. The event has exposed gaps in regulatory reporting. Under current NIS Regulations, the incident fell below mandatory notification thresholds because of the facility's size and the lack of significant impact on service continuity. This meant the attack went largely unobserved at the time. In response, the National Cyber Security Centre (NCSC) and the Department for Energy Security and Net Zero are investigating the attack and briefing energy sector leadership. The UK government has issued recommendations to energy sector executives to strengthen their cybersecurity defenses. The incident has prompted discussions regarding a potential review of electricity generation thresholds and revised reporting requirements following the Cyber Security and Resilience Bill. This follows a broader trend where cybersecurity experts note a 20% increase in offensives against operational technology environments compared to the previous year. ## Claims - Hackers linked to the Iranian regime are responsible for the cyberattack. (corroborated by 6 sources) - The cyberattack targeted a small-scale energy generation facility in the United Kingdom. (corroborated by 6 sources) - The affected facility was out of service for four days. (corroborated by 6 sources) - The incident did not pose a risk to the UK's national energy system or overall supply. (corroborated by 4 sources) - The identity of the targeted facility has not been disclosed for security reasons. (corroborated by 3 sources) - The UK government sent recommendations to energy sector leaders to strengthen cybersecurity. (corroborated by 2 sources) - The attack occurred in July. (corroborated by 2 sources) - The National Cyber Security Centre (NCSC) had previously warned of risks from hostile states like Iran. (corroborated by 2 sources) ## Timeline ### 2026-08-25: UK energy facility hit by cyberattack linked to Iran Hackers linked to Iran caused a small UK energy facility to shut down for four days in July. Authorities say the national grid remained secure, but the attack has raised critical infrastructure concerns. 7 sources. https://clstr.news/cluster/united-kingdom-energy-facility-targeted-in-cyberattack ### 2026-08-24: UK power plant cyber attack highlights infrastructure reporting gaps A cyber attack on a small UK power plant caused a four-day shutdown, highlighting regulatory gaps in reporting incidents that fall below mandatory critical infrastructure thresholds. 6 sources. https://clstr.news/cluster/uk-power-plant-cyber-attack-highlights-infrastructure-reporting-gaps ### 2026-08-24: United Kingdom launches resilience campaign amid rising cyber threats The UK government is urging citizens to stockpile emergency supplies amid rising risks of cyberattacks and infrastructure failures, following reports of a potential Iranian-linked power plant disruption. 3 sources. https://clstr.news/cluster/united-kingdom-launches-resilience-campaign-amid-rising-cyber-threats --- Cite as: UK critical energy infrastructure cyberattack. CLSTR, https://clstr.news/situations/uk-critical-energy-infrastructure-cyberattack