Reported Iranian cyber attack forces UK power generator offline for four days

In July 2026, a cyber attack reportedly linked to Iranian actors forced a small UK power generator offline for four days, per Integrity360. The incident did not threaten the wider grid but demonstrated that threat actors can disrupt physical energy assets. The attack comes as ransomware hit 3,300 industrial organisations globally last year, a 49% jump, according to Dragos.

Bottom line — 3,300 industrial organisations were hit by ransomware last year, per Dragos, as OT security becomes a strategic priority.

Go deeper (7)

• The UK government briefed energy company leaders on protecting infrastructure after the attack, per Integrity360.
• Dragos found that remote-access portals and VPNs were the most common entry point into industrial networks last year.
• AI is lowering the barrier to attacking energy infrastructure by accelerating reconnaissance and social engineering, per Integrity360.
• DefenXee launched SCADAHawk, an Indian OT CTEM platform that uses deception to detect threats before they reach critical assets, per ETCISO.
• Flexsin reports that a quarter of ICS-relevant vulnerabilities carried incorrect severity scores last year, and more than a quarter of advisories shipped with no patch or mitigation.
• InfotechLead notes that MDR solutions for converged IT/OT environments must preserve OT-specific context and safety constraints.
• The average OT ransomware dwell time now runs close to 42 days industry-wide, according to Flexsin.

Read the reporting