Iran-linked hackers are suspected of causing a small British power generator to go offline for four days last month, according to British security officials. UK Energy Minister Michael Shanks stated that there was no threat to the wider grid and that no power was lost. He described the generator as small but noted that his department had briefed CEOs on security measures following the incident.
The shutdown in the UK occurred shortly after hackers targeted over 30 community water systems in Minnesota, where technology used to monitor and control pumps was accessed. While Minnesota officials have not publicly attributed these attacks, several news outlets reported that U.S. officials believe Iran may be responsible. President Donald Trump has publicly disagreed with this assessment.
These incidents highlight the vulnerability of civilian infrastructure amid ongoing tensions between the U.S. and Iran. Smaller facilities, often less protected, can be targeted by hackers to cause disruptions without needing to breach major power grids. Many of these facilities use internet-connected industrial control systems, which can be manipulated by hackers once access is gained.
In a July alert, the FBI and the Environmental Protection Agency reported that malicious actors had targeted water and wastewater utilities in at least seven states, leading to operational disruptions. Federal agencies have warned that Iranian-affiliated actors have sought access to industrial devices across various sectors, resulting in operational disruptions and financial losses.
The threat posed by Iranian hackers extends beyond industrial systems. On August 18, the Justice Department charged 17 members of an Iran-based company with conducting a cyber theft campaign targeting universities, private companies, and government agencies, resulting in the theft of over 31 terabytes of data. Previous incidents include an Iranian hacker gaining access to a dam control system in New York in 2016.
Recent attacks underscore the potential for significant physical effects from relatively minor access points. In Minnesota, compromised controllers affected systems used for monitoring water levels and pump operations, leading to temporary offline status for some equipment. The intentions behind Tehran's cyber activities against Western infrastructure remain uncertain, but the UK generator shutdown demonstrates the disruptive potential of such cyber intrusions.