UK’s small power plants face higher cyber risk into 2030s despite Iran-linked hack

by | Sep 26, 2026 | Energy

UK’s small power plants face higher cyber risk into 2030s despite Iran-linked hack

An Iran-linked cyber-attack last month successfully breached an unnamed small-scale gas power plant in Britain, causing it to shut down for approximately four days. Officials briefed energy industry leaders on the incident this week, which marks one of the most successful cyber-attacks on UK energy infrastructure to date. The breach occurred despite the government recently outlining its strategy to enhance cybersecurity standards across the energy sector.

Under the government’s plan detailed in documents released this month, the industry regulator Ofgem has been tasked with developing new baseline cyber resilience requirements for gas and electricity infrastructure by the end of 2027, with implementation scheduled for the end of 2030. These new standards would specifically target small-scale gas plants similar to the one affected in the recent attack. The timeline has not been altered following the breach, according to officials familiar with the matter.

The delay in implementing heightened security measures has drawn criticism from lawmakers and industry experts. Opposition figures have characterized the extended timeline as risky, arguing that hundreds of small, unmanned power generators remain exposed to potential attacks from hostile states. The UK operates thousands of distributed energy assets increasingly connected through digital systems, and specialists warn that while the recent incident had no impact on the broader electricity grid, future attacks could have more significant consequences.

Government officials have emphasized that the UK maintains a highly resilient energy system and works closely with the energy sector on security matters. The government introduced a cyber security and resilience bill to parliament in the previous year and opened a consultation on power generator cyber resilience in March. Officials have noted that the country faces approximately four nationally significant cyber-attacks weekly, underscoring the urgency of the evolving threat landscape.

Article Attribution | Read More at Article Source

Article summary produced by Claude AI