Iran-linked hackers shut down a U.K. power plant, report alleges

Iran-linked hackers have successfully, albeit temporarily, disrupted a power plant in the United Kingdom, according to British media reports. The attack, believed to be the first of its kind in the country, occurred in July but has only recently come to light. Concurrently, Iranian-linked hackers allegedly targeted the water systems of a dozen U.S. states, including New Jersey, Minnesota, Georgia, and South Dakota.

The compromised systems, known as programmable logic controllers (PLCs), are crucial to various industrial processes, ranging from energy and water management to manufacturing, hospital operations, and even security systems. These controllers, which were designed decades ago, often lack the necessary cybersecurity measures to protect against modern threats.

U.S. cybersecurity agencies have reported that Iranian-linked actors frequently exploit simple techniques, such as scanning for unsecured devices and using default passwords, rather than employing sophisticated hacking methods. The British power plant outage lasted four days while technicians worked to regain control. British officials and industry executives have not disclosed the specific facility targeted, but it is understood to be a small-scale plant that did not affect the country's overall power supply.

No group has claimed responsibility, but experts suggest these incidents could serve as reconnaissance missions to prepare for more targeted attacks on valuable assets in the future. The United Kingdom has long expressed concerns over Iranian-linked cyber threats, notably citing a 2022 cyberattack that crippled Albania's government services.

Warnings have escalated recently due to the U.S.-Israel conflict with Iran and the assassination of Supreme Leader Ayatollah Ali Khamenei. In the past year, the UK's National Cyber Security Centre reported managing over 200 cyberattacks against critical infrastructure, with roughly 75% traced back to hostile states, including Russia, China, and Iran.