Iran-Linked Hackers Take UK Power Plant Offline as DNV Finds Industry Resilience Gaps Run Deep
A survey of 1,095 energy professionals found only 49% of companies maintain an active resilience strategy, as Iran-linked cyber attacks continue striking European infrastructure.
A small UK power plant was knocked offline for four days by hackers linked to Iran, Energy Voice reported on Wednesday (2026-09-23), part of a sequence of attacks that have arrived in the two weeks since DNV published its energy resilience paper at the Offshore Northern Seas conference.4
The attacks put numbers to a problem the industry had already catalogued. DNV's 2026 Energy Industry Insights survey, drawn from 1,095 senior professionals across 96 countries, found that only 49% of energy organisations have a clearly defined, regularly updated resilience strategy, and only 45% say their supply chain is diversified enough to withstand a major disruption. Just 56% are confident they could recover quickly from a major cyber incident.4
Those figures sit alongside two of the world's most consequential supply disruptions. The Oxford Institute for Energy Studies estimates Gulf shut-ins reached 12.1 million barrels per day in March (2026-03) and rose to 12.7 million barrels per day in April (2026-04), both measured against pre-war February (2026-02) levels. The Institute's reference case does not project Strait of Hormuz flows recovering to above 95% of pre-crisis levels until the fourth quarter of 2026.1
ICE Brent front-month eased 0.46% on Wednesday (2026-09-23) to $99.36 per barrel, while Urals crude held at $106.45 per barrel — an unusual inversion driven by sanctions routing complexity and ongoing Russian supply uncertainty. The daily price move points toward stabilisation. The survey data points elsewhere. [Live prices]
Daily price moves rarely capture the full scope of supply chain brittleness, and the 45% of energy companies that believe they could withstand a major supply disruption is thin cover given simultaneous pressure on Hormuz flows and Russian export routes. India's experience since the Hormuz crisis provides context: despite a 17% global LNG supply disruption, India's LNG imports fell only 5%, with May (2026-05) volumes down just 2% year-on-year, because the country drew on diversified supply from Oman, the US, Nigeria and Angola, according to S&P data.3 That kind of buffer is built over years of contract structuring. It does not materialise under duress.
Investment is flowing toward resilience in aggregate, though not at the company level. The IEA's World Energy Investment 2026 report projects total global energy investment reaching $3.4 trillion this year, with around $2.2 trillion directed toward electricity grids, battery storage, renewables, nuclear and efficiency. Spending on electricity supply and infrastructure alone is expected to approach $1.6 trillion.2 Yet the DNV survey found only 34% of respondents plan to increase climate resilience investment in 2026, even as drought and heatwaves have already pushed grids to failure — Ecuador being a recent example DNV cited.4
The IEA has described the West Asia conflict and Hormuz disruptions as triggering the largest global rethink on energy security since the oil shocks of the 1970s, with nations moving toward domestic sources including renewables, nuclear and electricity infrastructure.2 That strategic shift takes time to translate into physical diversification. Supply chain resilience at company level takes longer still, and on current survey evidence, the industry has not yet closed that gap.
The UK power plant incident lasted four days and affected a small facility. Cyber resilience gaps in the broader industry are not confined to outliers. The DNV survey found only 56% of companies confident in their recovery capability after a major cyber incident, and with Iran-linked actors actively testing European infrastructure, the Oxford Institute's Hormuz recovery timeline still rests on deconfliction assumptions that remain unconfirmed. The proportion of energy companies still without a tested resilience plan is the number to watch as fourth-quarter 2026 supply pressures build.4,1