The first-ever prosecution brought in the UK; for a breach of the Nuclear Industries Security Regulations 2003. Nigel Lawrence KC prosecuting.

Nigel Lawrence KC prosecuting

In a significant legal development, Sellafield Ltd, operator of Europe’s largest nuclear waste facility, has been fined £332,500 after pleading guilty to serious cyber security failings. The case, which concluded in June 2024, saw Sellafield Ltd admitting to breaches of cyber security regulations spanning from 2019 to early 2023.

The prosecution was led by Nigel Lawrence KC of 7 Harrington Street Chambers, acting on behalf of the Office for Nuclear Regulation (ONR). The ONR has long highlighted concerns over Sellafield’s cyber security practices, stating that the issues have been identified and raised by the regulator over a number of years.

This case marks a landmark event, as it is the first-ever prosecution brought in the UK for a breach of the Nuclear Industries Security Regulations 2003. These regulations are crucial for safeguarding national security, and the severity of the breaches made this prosecution unprecedented.

The case was heard in London due to the sensitive nature of the offences, with potential national security concerns arising from the cyber security vulnerabilities at such a critical infrastructure site. The hearing in London ensured that the issues surrounding the facility’s failings were examined in a setting equipped to handle matters of national importance.

To read more, please see the links below:

https://www.bbc.co.uk/news/technology-68675500

https://www.ft.com/content/0a9e78bf-8fda-4712-9076-8ac26b2f43a8

https://www.theguardian.com/business/2024/oct/02/sellafield-ordered-to-pay-nearly-400000-over-cybersecurity-failings

https://www.itpro.com/security/a-disaster-waiting-to-happen-sellafield-plant-admits-to-glaring-cybersecurity-failures