Iran-linked hackers successfully shut down a small power plant in the UK for four days, marking the first cyberattack of its kind on a British power facility, The Telegraph reported. UK officials described the incident as the most successful cyberattack against a UK power plant to date. The shutdown did not threaten the wider power grid, according to the UK government, which kept the plant unnamed for security reasons, as reported by medianama.com.
The National Cyber Security Centre (NCSC), part of the UK’s Government Communications Headquarters (GCHQ), received the report of the attack and subsequently briefed energy company leaders. The government also issued guidance to businesses on how to respond to cyberattacks. The NCSC’s role is comparable in some ways to India’s Computer Emergency Response Team (CERT-In), though their mandates differ. The incident highlights the challenges of attributing cyberattacks, which often complicates response strategies, medianama.com explained.
This cyberattack underscores the growing threat to critical infrastructure worldwide and has prompted India to strengthen its cyber defenses in the power sector. On July 31, 2026, India’s Central Electricity Authority notified new regulations to establish a sector-specific cybersecurity body called the Computer Security Incident Response Team for the Power Sector (CSIRT-Power). This move aims to enhance India’s ability to detect and respond to cyber threats targeting the power industry, according to medianama.com.
The Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026, officially propose the formation of CSIRT-Power, reflecting India’s efforts to bolster cybersecurity in critical infrastructure. The regulations were notified on July 31, 2026, marking a significant step in India’s cybersecurity policy framework, medianama.com reported.