UNCLASSIFIED // OSINT-DERIVED · NOT A U.S. GOVERNMENT PRODUCT
Tomahawk Technology TOMAHAWK.

OPEN-SOURCE INTELLIGENCE
REPORTING WITH ITS LIMITS STATED

TT-S-281 SPOT 232355Z AUG 26 US critical infrastructure and domestic security incidents

Social Media Accounts Report Iran-Linked Cyberattack Took UK Power Plant Offline for Four Days

Three accounts on X reported on 23 August 2026 that a cyberattack attributed to Iran-linked actors forced a small power-generating facility in the United Kingdom offline for four days. Two of the posts cite The Telegraph as the origin of the claim and describe it as the first known incident of its kind in Britain. No official statement and no first-hand account of the incident were observed within the reporting window.

Social Media Accounts Report Iran-Linked Cyberattack Took UK Power Plant Offline for Four Days
TT-S-281-2026-08-23-uk-power-plant-cyberattack-social-reporting.x.png
NOT ESTABLISHED
  • No official statement from any UK government body, energy regulator, or plant operator was observed.
  • The underlying newspaper report cited by two of the accounts was not observed directly; only the social media summaries of it were collected.
  • The affected facility is unnamed, and no location more specific than the United Kingdom was given.
  • No dates for the reported four-day outage were provided in any observed post.
  • No first-hand account, imagery, outage data, or technical detail of the reported intrusion was observed.
  • Attribution to Iran-linked actors originates entirely from the relayed reporting; no independent corroboration of attribution was observed.
  • The 2023 Ireland water treatment claim raised by one account is uncorroborated in this collection and is not connected to the UK claim by any observed source.
  • No observation in this collection concerns US critical infrastructure or US federal facilities.

SOURCE TRACE

3 observation(s) collapsing to 3 independent lineage(s). Grades are Admiralty: letter for source reliability, digit for information credibility. F6 means the source cannot be judged — not that it is false.

GRADEKINDLINEAGEOBSERVATIONSOURCE
F6secondaryL1@IsraelRealtime: 💻 Iranian hackers reportedly shut down UK power plant: Iranian hackers shut down a small power plant in the UK for four days, marking the first known attack of its kind in x.com/IsraelRealtime/status/2091586134900175352
F6secondaryL2@kr51877: 🚨 BREAKING: IRAN-LINKED HACKERS REPORTEDLY KNOCK UK POWER FACILITY OFFLINE A cyberattack linked to Iran reportedly forced a British power-generating facility offline for four daysx.com/kr51877/status/2091582489479507980
F6secondaryL3@antonerable: In 2023 an Iranian cyber attack on a water treatment site left an entire community in Ireland without water for days https://t.co/Mh4hTQr6rOx.com/antonerable/status/2091571768523661518

RELEASED BY TT6 · GENERATED BY [email protected] (gdelt+x, triaged)

← ALL REPORTING