Nuclear waste clean-up company to be prosecuted over alleged cyber blunders

Sellafield has served as a nuclear testing ground and waste dump since 1947 – Christopher Furlong/Getty Images

A state-owned company responsible for cleaning up decades of nuclear waste at the Sellafield site in Cumbria is being prosecuted over alleged cybersecurity blunders.

It follows an investigation prompted by fears that the business’s digital defences were breached by hackers acting for hostile states such as Russia and China.

Sellafield is Europe’s largest nuclear facility, serving as a testing ground and waste dump since 1947. It houses a massive range of highly radioactive wastes, including 140 tonnes of plutonium – a key ingredient for nuclear weapons.

The Office for Nuclear Regulation (ONR) has told Sellafield Ltd, the business tasked with clean-up, that it will be prosecuted under the Nuclear Industries Security Regulations 2003.

The charges relate to alleged information technology security offences during a four-year period between 2019 and early 2023.

The announcement coincides with reports today that Richard Meal, who is chief information security officer at the Cumbrian site, is to leave later this year.

It follows the departure of Mark Neate, the director responsible for safety and security, who announced in January that he intended to quit in a move that had been planned for some time.

Sellafield has denied claims the site had suffered serious security breaches and the ONR has supported this. The new charges are thought to relate to alleged failures in compliance – meaning they are more about lax security than actual breaches.

An ONR spokesman said there was no suggestion that public safety had been compromised. Details of the first court hearing will be announced when available.

Sellafield Ltd is owned by the Nuclear Decommissioning Authority, a quango overseen by the Department for Energy Security and Net Zero, which is tasked with cleaning 17 decaying nuclear sites across the UK. Sellafield is the most expensive, costing taxpayers £2.5bn last year.

Some government estimates suggest the total cost of the clean-up will reach £263bn, with Sellafield accounting for the largest portion. The site employs 11,000 people and comprises more than 1,000 buildings, many not designed to house the radioactive material now stored in them.

Sellafield is so expensive that the Office for Budget Responsibility, which monitors threats to the UK Government’s finances, has warned that it and other legacy sites pose a “material source of fiscal risk” to the country.

The ONR investigation is in addition to another by the National Audit Office, Britain’s public spending watchdog, which is probing risks and costs at Sellafield and is due to report this autumn.

A Sellafield spokesman said: “The ONR’s Civil Nuclear Security and Safeguards (CNSS) has notified us of its intention to prosecute the company relating to alleged past nuclear industry security regulations compliance. As the issue is now the subject of active court proceedings, we are unable to comment further.”

It follows separate reports by Radioactive Waste Management Ltd (RWM), another government-owned company, that hackers unsuccessfully attempted to breach its defences using LinkedIn.

RWM, now part of Nuclear Waste Services, is the company tasked with designing the long-awaited Geological Disposal Facility (GDF) project,  a vast underground nuclear waste store which would become the final destination for toxic waste now stored at Sellafield.

Nuclear Waste Services is currently seeking a site that would be geologically stable for the millions of years the waste would need to become safe – and which would be acceptable to the local communities hosting it.

Two sites remain in the running, one off the coast of Cumbria and the other off the coast of Lincolnshire, with the choice of site still surrounded in secrecy.

The development is expected to cost taxpayers up to £53bn.

A report filed at Companies House by Nuclear Waste Services said the attempted hacks had failed.

Sign up to the Front Page newsletter for free: Your essential guide to the day’s agenda from The Telegraph – direct to your inbox seven days a week.