Iranian Hackers Shut Down UK Power Plant for 4 Days, Hit US Water Systems Across 12 States

•1mo ago

Iranian Hackers Shut Down UK Power Plant for 4 Days, Hit US Water Systems Across 12 States

Tap title to read story

0:00 / 1:04

A British electricity generator was shut down for four days in July in a cyberattack officials confirmed, while The Telegraph attributed the incident to Iranian-linked hackers. Officials said the facility was small and never threatened the wider UK power system. The National Cyber Security Centre was notified, and the government briefed energy-company executives on defensive measures. The disclosure came amid a separate cyber campaign against water and wastewater utilities in at least 12 U.S. states. More than 30 Minnesota systems were targeted, while incidents were also reported in Michigan, Georgia, New Jersey and South Dakota. U.S. officials warned of malicious activity affecting industrial control systems, including programmable logic controllers, but federal agencies have not publicly attributed the entire water campaign to Iran. Intelligence officials and sources have nevertheless identified Iran as a leading suspect. No widespread U.S. drinking-water contamination has been reported. The incidents highlight vulnerabilities in internet-connected critical infrastructure.

Published 2026-08-23 16:28:10 UTC · Published by JQJO

Prepared by Sidra · AI assisted

Timeline

On July 26, Minnesota systems reported cyber intrusions affecting operations.
On July 27, FBI received reports from utilities across states.
On July 30, federal agencies warned utilities about malicious cyber activity.
On July 31, U.S. officials publicly investigated possible Iranian involvement.
On August 4, reports expanded water attacks to twelve states.
On August 6, CBS reported twelve states and Iranian suspicions.
On August 19, agencies warned Siemens controllers faced active targeting.
On August 22, Telegraph publicly reported four-day UK generator shutdown.
On August 23, UK officials maintained wider grid remained unaffected.
On August 23, U.S. water attacks remained under investigation federally.
In coming days, utilities will continue reviewing exposed industrial systems.
Over coming months, federal agencies may expand infrastructure cybersecurity guidance.
Over coming months, investigators may refine attribution using technical evidence.
Within years, critical infrastructure operators will likely strengthen operational technology defenses.