“roughly 75% of Sellafield’s servers were vulnerable to attacks with potentially catastrophic consequences.”
Sellafield broke its own approved security plan for four years, from 2019 to 2023. Regulators figured ransomware could halt the site for up to 18 months. The fine is £332,500. That is the price of leaving Europe’s biggest pile of nuclear waste on servers anyone could break into.