![UK AI Cyberattack on Infrastructure by 2028: NCSC](https://cdn.slatesource.com/b/a/a/baacc4ce-80e3-4681-87d9-f6c0a86749a5.webp) # UK AI Cyberattack on Infrastructure by 2028: NCSC - [Made in Slatesource](https://slatesource.com/@steph/uk-ai-cyberattack-on-infrastructure-by-2028-ncsc) - By [Steph](https://slatesource.com/@steph) - Created on Nov 3, 2026 **337** NCSC incidents handled in 2025-26 [ncsc.gov.uk](https://www.ncsc.gov.uk/collection/annual-review-2026?utm_source=slatesource) > Vulnerabilities that have been tolerated for far too long can now be discovered and exploited at a scale that was once unimaginable. > > — ncsc.gov.uk Nationally significant incidents 80 of 337 Annual cost to UK organisations ~$20 billion JLR attack direct losses (2025) $260 million+ UK share of global phishing (Jun 2026) 1.06% Govt Cyber Action Plan investment £210 million+ Cyber Shield first phase (AI defence) £60 million NERV Centre (real-time vulnerability) £70 million [ncsc.gov.uk](https://www.ncsc.gov.uk/collection/annual-review-2026?utm_source=slatesource) ## State actors named in NCSC 2026 review Actor NCSC assessment Primary target China Highly likely has intent; best positioned to use AI against CNI Critical national infrastructure Russia Sustained attempts to penetrate UK military networks; AI use highly likely by 2028 Defence and government Russia FSB Linked to Dec 2025 Poland energy grid attack Energy (500,000 at risk) [ncsc.gov.uk](https://www.ncsc.gov.uk/collection/annual-review-2026?utm_source=slatesource) AI cyber threat: from isolated incidents to systemic risk01.12.2025 – 01.01.2028 01.12.2025Russia's FSB linked to Poland energy grid attack; 500,000 at risk of blackout 01.12.2025 01.09.2026NCSC review period opens (Sept 2025-Aug 2026): 337 incidents, 80 nationally significant 01.09.2026 03.11.2026NCSC Annual Review 2026 published; "highly likely" AI malware will hit UK CNI by 2028 03.11.2026 03.11.2026UK Government Cyber Action Plan announced; more than £210 million in backing 03.11.2026 01.01.2027NERV Centre (National Exposure and Real-Time Vulnerability) begins operations 01.01.2027 01.01.2028NCSC assessment window: AI-powered ransomware attack on UK CNI expected by this date 01.01.2028 [ncsc.gov.uk](https://www.ncsc.gov.uk/collection/annual-review-2026?utm_source=slatesource) ## What the NCSC says and what it does not The review says it is "highly likely" AI-powered malware will be used in a ransomware attack on UK critical national infrastructure (CNI) by 2028. CNI covers power stations, airports, hospitals, water systems, food supply and financial services. • AI did not create these weaknesses, the report says; it accelerated their discovery and exploitation at scale. • China is described as the most sophisticated and sustained challenge; Russia as the most active near-term threat. • The report does not name a specific planned attack or name a specific target. • The 2025 Jaguar Land Rover breach is cited as a private-sector benchmark (more than $260 million in direct losses). • Defensive AI programme Project DROMOS already found hundreds of potential issues in government networks. ## What is not yet confirmed • No date has been set for the NERV Centre to go fully operational. • No breakdown of the £210 million total investment by year or department has been published. • No assessment of whether the 2028 deadline applies equally to Scotland, Wales and Northern Ireland devolved infrastructure. • The AI Cyber Security Centre of Excellence in Manchester has no confirmed launch date. What comes next 0% Cyber Shield phase 1 deployment (funded; timeline not yet public) NERV Centre launch: real-time scanning of public-sector attack surface AI Cyber Security Centre of Excellence to open in Manchester Government Cyber Action Plan implementation milestones (expected Q1 2027) Next NCSC Annual Review: covers Sept 2026 to Aug 2027 [ncsc.gov.uk](https://www.ncsc.gov.uk/news/cyber-chief-uk-facing-ai-powered-attacks-on-critical-infrastructure-in-two-years?utm_source=slatesource) [NCSC Annual Review 2026 (primary source)](https://www.ncsc.gov.uk/collection/annual-review-2026?utm_source=slatesource) [NCSC press release: AI-powered attacks within two years](https://www.ncsc.gov.uk/news/cyber-chief-uk-facing-ai-powered-attacks-on-critical-infrastructure-in-two-years?utm_source=slatesource) [The Record: UK NCSC predicts unprecedented rise in attacks](https://therecord.media/uk-ncsc-predicts-rise-cyberattacks-coming-months?utm_source=slatesource) [The Guardian: AI-powered malware 'highly likely' to hack UK infrastructure](https://www.theguardian.com/technology/2026/nov/03/ai-powered-malware-artificial-intelligence-hacking-critical-uk-infrastructure?utm_source=slatesource) Sources: NCSC Annual Review 2026 (primary); The Guardian 00:01 UTC 3 Nov 2026; The Record Media; Washington Times; WSLS/AP wire. All figures sourced directly from the NCSC report or attributed press statements. No invented projections.