UK's Sellafield nuke waste processing plant fined £333K for infosec blunders

The UK Office for Nuclear Regulation fined Sellafield Ltd £332,500 (plus £53,253.20 costs) after the company pleaded guilty to cybersecurity failings between 2019 and 2023, including inadequate protection of sensitive nuclear information and failure to conduct required OT health checks. While authorities found no evidence of exploitation and earlier malware allegations were denied, inspectors warned that a successful ransomware or phishing attack could severely disrupt high-hazard decommissioning operations.