Cyber attacks on critical infrastructure

What is a critical-infrastructure cyberattack?

Power networks, water companies, transport operators, hospitals and payment providers use computer systems to monitor operations and deliver services. A cyberattack may attempt to steal data, lock systems, interrupt operations or interfere with industrial controls.

Many cyber incidents are contained and do not affect essential services. However, a serious, coordinated attack or one affecting a particularly important supplier could cause wider disruption.

What could people experience?

A real example: the NHS in 2017

The WannaCry ransomware incident disrupted NHS organisations in England, leading to cancelled appointments and operational difficulties. It demonstrates how a cyber incident can affect everyday services without requiring a nationwide electricity blackout.

Could a cyberattack cause a Black Sky Event?

Cyber incidents are one possible cause of serious infrastructure disruption, but a national, prolonged failure would require an unusually severe combination of impacts. It should not be presented as an expected outcome of ordinary hacking or online fraud.

How households can prepare

Keep a small amount of cash if practical, save key telephone numbers offline, retain paper copies of important information and know where to find verified updates. Separately, use strong unique passwords, software updates and multi-factor authentication to reduce your own cyber risk.