The UK National Cyber Security Centre (NCSC) says most cyberattacks targeting the country’s critical infrastructure are linked to hostile state actors. NCSC chief executive Richard Horne states that three-quarters of attacks against critical infrastructure and supporting systems can be attributed to state-linked assailants. Speaking publicly, Horne describes an ongoing “contest with capable adversaries” and warns that hostile states are increasingly targeting systems underpinning essential services.
According to the NCSC figures reported by multiple outlets, the agency handled around 200 incidents involving critical infrastructure and supporting systems in the year to May 2026. The reporting also lists examples of critical national infrastructure systems, including the nuclear deterrent, power plants, hospitals, and airports. Hostile states mentioned by name include Russia, China, and Iran.
The outlets collectively present these statements as part of the NCSC’s broader threat assessment, emphasizing the proportion of incidents associated with nation-state activity and the scale of incidents affecting UK critical services over the past year.
