What happened

A cyberattack shut an unidentified small-scale British energy generator for four days. The Department for Energy Security and Net Zero confirmed that the incident affected a small generator and said the wider UK energy system was never at risk. The National Cyber Security Centre was involved in the response; the NCSC and energy department subsequently briefed energy-sector chief executives and wrote to companies with advice, direction and next steps. Media attributed the operation to Iran-linked hackers and described it as the first known successful Iranian-linked cyberattack to take a UK power facility offline, but the public government statement did not confirm either the actor or that historical characterization. The Telegraph reported that the incident coincided with attacks on US water infrastructure affecting 12 states and drawing White House concern. Separately, Al Jazeera and Reuters reported that more than 30 Minnesota community water systems were affected in a coordinated attack and that officials considered similarities to Iran-aligned activity preliminary; no public evidence reviewed established that the UK and US campaigns were operationally connected. Officials withheld the plant's identity and location for security reasons. Its generating technology, capacity, intrusion method and exact July dates also remain undisclosed, so the marker is a country-level reference.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.