Iran-Linked Hackers Disrupt UK Power Plant in Landmark Cyberattack A small British power plant was forced offline for four days in what UK officials have confirmed as the country’s first successful cyberattack targeting a power facility. While the plant’s identity remains undisclosed for security reasons, authorities stated the incident posed no risk to the broader national grid. The attack was reported to the National Cyber Security Centre (NCSC), a branch of GCHQ, which subsequently briefed energy sector leaders and issued guidance to businesses on cyber incident response. The breach underscores the growing threat to critical infrastructure, particularly as cyberattacks become harder to attribute. Experts note that such operations often rely on compromised devices or proxies, making it difficult to pinpoint responsibility especially when no group claims credit. The incident follows a pattern of escalating cyber threats to energy systems, including past attacks linked to state-backed actors. Meanwhile, India is advancing its own cybersecurity measures for the power sector. On July 31, 2026, the Central Electricity Authority notified new regulations proposing the creation of CSIRT-Power, a sector-specific Computer Security Incident Response Team modeled after CERT-In. The move aims to bolster defenses amid rising concerns over vulnerabilities in critical infrastructure. India has faced its own cybersecurity challenges, including a 2020 malware attack on the Kudankulam Nuclear Power Plant, initially denied but later confirmed, and a 2026 data leak involving a Reliance Group contractor at the same facility. Earlier reports also suggested China-linked hackers (RedEcho) targeted India’s power and maritime infrastructure during the 2020 border standoff, though no direct link to the Mumbai blackout was officially established. The incident highlights the private sector’s heightened exposure to cyber threats, as privatization expands the attack surface beyond government-controlled entities. Analysts argue that public-private partnerships focusing on shared responsibility, capacity-building, and standardized audits are critical to strengthening defenses. However, gaps in India’s cybersecurity capabilities remain a concern, with experts emphasizing the need for supply chain control and technological sovereignty to mitigate risks. The UK attack serves as a stark reminder of the evolving tactics of state-backed hackers and the urgent need for robust, sector-specific cybersecurity frameworks.