The UK government confirmed a small power generator was forced offline for four days in July in a suspected Iran-linked cyberattack, and officials linked the case to the same period as parallel intrusions against U.S. water systems. The facility was not named, and the government said the incident did not threaten the wider electricity grid.
That matters because the point was not scale: even a small generator can show that attackers reached operational energy infrastructure, which is why ministers briefed energy CEOs and pulled in the National Cyber Security Centre. The reporting does not say whether the same technique reached the UK site and the U.S. targets, only that the timing and target class line up.
For operators running connected industrial systems, the exposure sits across the wider critical-infrastructure ecosystem, not just the one plant that went dark. A contained outage can still be a signal that the route in works, and smaller sites may be where that proof is being made.