UK nuclear site Sellafield fined $440,000 for cybersecurity shortfalls

Sellafield, one of Europe’s largest nuclear facilities, was fined £332,500 by the UK Office for Nuclear Regulation after an investigation found the site failed to follow its approved cybersecurity procedures from 2019–2023, leaving numerous unpatched vulnerabilities that could enable ransomware, phishing, or data loss; ONR reported no evidence those weaknesses were exploited and Sellafield is undergoing remediation and leadership changes.