Polls | Gaza | Fact Checker | Support Us
Sign In | Join Free |
UK FACT CHECK POLITICS

UK FACT CHECK POLITICS

 Voting intention Labour Lab 27% Reform Ref 24% Con Con 19% Green Grn 10% Lib Dem LD 9% Poll tracker

Menu

Topics
About
Get Involved
Follow Us

Account

Hackers with suspected links to Iran have been blamed for a cyber attack that forced a British power plant to temporarily shut down for 4 days

ukfactcheck.com 01 September 2026 at 04:55 View original article →

The original link is the material being checked. It may contain false or misleading claims — we link for transparency, not endorsement.

78/100
Verdict Mixed Largely Reliable — Substantially Accurate, with Sourcing Opacity and One Material Temporal Error

The article's central factual core stands up to verification.

✓ 11 checks out ✕ 1 disputed ? 3 unverified
☰ Full analysis The complete summary ⌄

The article's central factual core stands up to verification. Multiple independent, dated outlets (RTÉ, The Irish Times, Middle East Eye, Israel Hayom, IBTimes UK, Security Affairs, Cybersecurity News) report that Iran-linked hackers were blamed for a cyber attack that took a small British electricity generator offline for four days in late July 2026, originally reported by The Sunday Telegraph on 22–23 August 2026. The Department for Energy Security and Net Zero (DESNZ) statement quoted in the article — that the incident affected a 'small-scale energy generator' and that 'at no point was there a risk to the wider energy system' — matches the wording reproduced by RTÉ and The Irish Times almost verbatim. Supporting context is also verifiable: Dr Richard Horne's June 2026 RUSI Annual Security Lecture warning about Russia, China and Iran targeting UK critical national infrastructure; Claire Coutinho's incumbency as Shadow Secretary of State for Energy Security and Net Zero since 8 July 2024 (UK Parliament); the IRGC's 23 July 2026 statement that 'any base used for aggression against Iranian territory is a legitimate target'; the UK's permission for US 'defensive' operations from RAF Fairford and Diego Garcia; and CISA advisory AA23-335A confirming that IRGC-affiliated actors using the CyberAv3ngers persona compromised at least 75 Unitronics devices. Two weaknesses pull the score down. First, a material temporal error: the article states Prime Minister Andy Burnham 'was notified last week' of a decision to extend the US bases agreement, whereas Bloomberg, Al Arabiya, i24NEWS and Middle East Eye all date that briefing and endorsement to roughly 20–22 July 2026 — about a month before publication, following a COBR-style meeting chaired by his predecessor Keir Starmer before Burnham took office. Second, the article contains no hyperlinks or named originating source (no anchors or JSON-LD sources were extractable), does not credit The Sunday Telegraph as the originator, and relies on unattributed 'is understood' constructions. One sentence about attacks 'linked to Israeli government websites' is syntactically garbled and cannot be assessed as written. Tone is measured: the low emotion score (0.14), minimal capitalisation ratio (0.01) and inclusion of the government's counter-framing indicate restrained presentation rather than alarmism, though the framing is single-perspective (no Iranian denial, no independent technical attribution, no cyber-security expert scepticism included).

What checked out (11)
  • Iran-linked hackers have been blamed for a cyber attack that forced a British power plant offline — corroborated by RTÉ (https://www.rte.ie/news/uk/2026/0823/1588910-uk-cyber-attack/), The Irish Times (https://www.irishtimes.com/world/uk/2026/08/23/iran-linked-hackers-accused-of-cyberattack-that-shut-down-british-power-plant/) and Middle East Eye (https://www.middleeasteye.net/news/iranian-cyber-attack-shuts-down-uk-power-plant-four-days), all dated 23 August 2026 and tracing to The Sunday Telegraph.
  • The affected site was a small-scale energy generator, shut for four days last month (late July 2026), with no risk to the wider energy system — DESNZ statement reproduced by RTÉ and The Irish Times; also IBTimes UK (https://www.ibtimes.co.uk/uk-power-plant-cyber-attack-energy-security-concerns-1815716).
  • DESNZ said the UK 'has a highly resilient energy system' and works closely with the energy sector to protect infrastructure and ensure the highest security standards — direct quotation confirmed by RTÉ (https://www.rte.ie/news/uk/2026/0823/1588910-uk-cyber-attack/).
  • The NCSC is understood not to have received reports of outages from regulated power station operators — confirmed by The Irish Times and VINnews (https://vinnews.com/2026/08/23/iranian-hackers-blamed-for-cyberattack-that-shut-down-british-power-plant/).
  • The government subsequently briefed power company chief executives and wrote to companies with advice — RTÉ and Middle East Eye.
  • NCSC chief executive Richard Horne warned earlier this year (RUSI Annual Security Lecture, June 2026) that hostile states including Russia, China and Iran are increasingly targeting systems underpinning essential services — Reuters coverage via https://www.globalbankingandfinance.com/uk-three-quarters-cyberattacks-critical-systems-linked/ and https://industrialcyber.co/critical-infrastructure/ncscs-horne-warns-uk-infrastructure-under-sustained-cyber-pressure-from-russia-china-and-iran-urges-resilience/
  • Claire Coutinho is the Shadow Secretary of State for Energy Security and Net Zero (in post since 8 July 2024) — primary source: UK Parliament member profile (https://members.parliament.uk/member/4806/contact).
  • Britain has permitted the US to use British bases (RAF Fairford; Diego Garcia) for operations the UK describes as defensive, while maintaining it is not part of offensive US operations — Bloomberg (https://www.bloomberg.com/news/articles/2026-07-21/burnham-approves-use-of-uk-bases-for-some-us-strikes-on-iran), Middle East Eye (https://www.middleeasteye.net/news/uk-burnham-approves-us-use-bases-some-strikes-iran), i24NEWS (https://www.i24news.tv/en/news/international/europe/artc-burnham-approves-use-of-uk-bases-for-some-us-strikes-on-iran).
  • Last month the IRGC said any base used for aggression against Iranian territory would be considered a legitimate target (statement of 23 July 2026) — RFE/RL text via https://www.globalsecurity.org/wmd/library/news/iran/2026/07/iran-260724-rferl06.htm and The Express Tribune (https://tribune.com.pk/story/2619853/irgc-warns-any-uk-base-used-by-us-to-attack-iran-will-become-legitimate-target).
  • The British government responded that the UK/its armed forces are ready to defend the country — RFE/RL text via globalsecurity.org (link above).
  • US agencies have warned about IRGC-linked hackers, and CyberAv3ngers was accused of a 2023 campaign compromising at least 75 devices across multiple infrastructure sectors — primary source: CISA/FBI/NSA joint advisory AA23-335A (https://www.cisa.gov/sites/default/files/2024-12/aa23-335a-irgc-affiliated-cyber-actors-exploit-plcs-in-multiple-sectors.pdf), which records at least 75 compromised Unitronics devices including at least 34 in the US water and wastewater sector.
✕ Disputed claims 1 claim ⌄
  • DISPUTED / MATERIALLY INACCURATE TIMING: 'Prime Minister Andy Burnham was notified last week of a decision to extend the existing agreement with the United States.' Andy Burnham is correctly identified as Prime Minister (he took office on 20 July 2026, succeeding Keir Starmer), but at least four dated reputable secondary sources place his briefing and endorsement on or around 20–22 July 2026 — approximately one month before this article's 23 August 2026 publication window — following a meeting of senior ministers chaired by Starmer before Burnham took office: Bloomberg, 21 July 2026 (https://www.bloomberg.com/news/articles/2026-07-21/burnham-approves-use-of-uk-bases-for-some-us-strikes-on-iran); Al Arabiya English, 21 July 2026 (https://english.alarabiya.net/News/middle-east/2026/07/21/new-uk-pm-burnham-approves-use-of-uk-bases-for-some-us-strikes-on-iran); Middle East Eye, 22 July 2026 (https://www.middleeasteye.net/news/uk-burnham-approves-us-use-bases-some-strikes-iran); i24NEWS, 22 July 2026 (https://www.i24news.tv/en/news/international/europe/artc-burnham-approves-use-of-uk-bases-for-some-us-strikes-on-iran). 'Last week' is therefore not supported; additionally, sources describe continuation of an existing Starmer-era policy that Burnham approved, rather than a decision he was merely 'notified' of.
? Unverified claims 3 claims ⌄
  • The specific paraphrased remarks attributed to the Conservatives and to Claire Coutinho in response to this incident ('warfare was changing'; that reliance on imported gas and electricity leaves Britain more exposed) are corroborated only in paraphrase by a single low-authority outlet (https://thebritisheye.com/2026/08/23/uk-power-plant-shut-cyber-attack-iran/); no primary transcript, party press release or wire-service verbatim quotation was located. Substance is consistent with her documented public positions, but exact wording is Unverified.
  • The sentence stating that 'suspected attacks have also been linked to Israeli government websites and other critical infrastructure' is syntactically garbled and its intended meaning is indeterminate; as written it cannot be matched to any located source and is therefore Unverified rather than false. (Iranian-linked targeting of Israeli-made Unitronics PLCs and Israeli-linked systems is separately documented in CISA AA23-335A and Tenable analysis at https://www.tenable.com/blog/what-to-know-about-cyberav3ngers-the-irgc-linked-group-targeting-critical-infrastructure, but that is not what the sentence asserts.)
  • Formal state attribution of the power plant incident to Iran by the UK government or NCSC is Unverified: the NCSC has not publicly confirmed details or named the facility, and the Iran linkage rests on press reporting and unnamed officials (https://cybersecuritynews.com/hackers-force-uk-power-plant-offline/). No Iranian denial or independent forensic attribution was located.
⌕ Sources & how we checked Search journal, source grades, confidence ⌄
Confidence

Medium-High (0.82) — Confidence is raised by the availability of two authoritative primary sources (CISA advisory AA23-335A and the UK Parliament member record), a verbatim government statement carried by a public broadcaster, and dense multi-outlet corroboration of the core incident and the geopolitical context, with explicit publication dates enabling temporal adjudication. Confidence is capped below high for four reasons: all coverage of the central incident derives from one paywalled originating report, so corroboration is broad but not independent; there is no official state attribution of the attack to Iran and no located Iranian response; the affected facility is unnamed, foreclosing operator-level verification; and the submission supplied no publication date, byline or embedded sources, so relative time expressions ('last week', 'last month') were adjudicated against an inferred publication window of 23–24 August 2026. Had a confirmed publication date been provided, confidence on the single disputed claim would rise further.

Search journal

UK Prime Minister 2026

Iran linked hackers cyber attack British power plant shut four days

UK power station cyber attack Iran DESNZ small generator

Claire Coutinho shadow energy secretary

Richard Horne NCSC chief executive warning Iran Russia China critical infrastructure

NCSC no reports of outages regulated power station operators Iran power plant cyber attack

Claire Coutinho Conservatives warfare changing energy security imported gas electricity cyber attack power plant

Andy Burnham US bases Britain defensive operations Iran extension agreement

IRGC statement any base used for aggression against Iran legitimate target July 2026

CyberAv3ngers 75 devices US infrastructure 2023 Unitronics CISA

Sunday Telegraph Iran cyber attack UK power plant late July DESNZ briefed energy chiefs

Burnham briefed decision extend agreement US bases Iran last week August 2026

≡ The article we checked Full text as retrieved ⌄
<p>Hackers linked to Iran have been blamed for a cyber attack that forced a British power plant to shut down for several days.</p> <p>The incident affected a small scale energy generator and resulted in the site being shut for four days last month. The government has stressed that the attack did not pose a threat to Britain’s wider energy system.</p> <p>However, the incident has raised fresh concerns over the threat of cyber attacks linked to hostile states, particularly at a time of heightened tensions between Britain and Iran.</p> <p>A spokesperson for the Department for Energy Security and Net Zero said the incident only affected a small generator and that there was never a risk to the wider energy network.</p> <p>The department said Britain has a highly resilient energy system and that the government works closely with the energy sector to protect critical infrastructure and maintain high security standards.</p> <p>The National Cyber Security Centre, which is responsible for helping protect Britain’s critical infrastructure from cyber threats, is understood not to have received reports of outages from regulated power station operators.</p> <p>The attack comes amid growing warnings about the ability of hostile states to target vital British infrastructure through cyber operations.</p> <p>Earlier this year, National Cyber Security Centre chief executive Richard Horne warned that countries including Iran, Russia and China were increasingly targeting the systems that underpin essential services across the UK.</p> <p>The Conservatives said the incident demonstrated how warfare was changing and called for Britain to strengthen its domestic energy security.</p> <p>Shadow energy secretary Claire Coutinho said the world was becoming more dangerous and argued that relying heavily on imported gas and electricity could leave Britain more exposed.</p> <p>The incident also comes against the backdrop of rising tensions between the UK and Iran.</p> <p>Britain has permitted the United States to use British bases hosting American aircraft for what the government describes as defensive operations connected to the conflict with Iran. The UK has maintained that it is not participating in offensive US operations.</p> <p>Prime Minister Andy Burnham was notified last week of a decision to extend the existing agreement with the United States.</p> <p>Iran has previously warned that military bases used to support attacks against the country could become targets.</p> <p>Last month, Iran’s Islamic Revolutionary Guard Corps said that any base used for aggression against Iranian territory would be considered a legitimate target.</p> <p>The British government responded by saying the UK was ready to defend itself.</p> <p>Iran has faced accusations for years of carrying out or supporting cyber attacks against foreign governments and infrastructure.</p> <p>Iranian linked hackers have previously been accused of targeting systems in several countries, while suspected attacks have also been linked to Israeli government websites and other critical infrastructure.</p> <p>US security agencies have also warned about the threat posed by hackers linked to the Islamic Revolutionary Guard Corps.</p> <p>American authorities previously accused an Iran affiliated hacking group known as CyberAv3ngers of carrying out a campaign against US infrastructure in 2023. The group was alleged to have compromised at least 75 devices across several infrastructure sectors.</p> <p>The shutdown of a British power generator, even on a relatively small scale, is likely to add to concerns about the growing role cyber attacks could play in conflicts between states and the need to protect Britain’s critical infrastructure from disruption.</p>

Share this fact check

← Check another article or image