For the purposes of this question, "an act of cyberwar" is a cyber act (i.e., an unauthorized, malicious, and destructive act completed against a computer system through the use of a computer system) that compromises and disrupts a critical infrastructure system with substantial destructive effects (United Nations Office on Drugs and Crime). For the purposes of the accuser, "US" means the executive branch of the federal government. "Critical infrastructure" is as defined in the United States Code at 18 USC 2339D(c)(3) (Cornell). Critical infrastructure does not necessarily have to be within the territory of the US to count, and both the act and accusation must occur during the question's open period to count. An accusation must be against either the government of Iran or a person or entity the US asserts is either sponsored or directed by the government of Iran. Accusations of superficially disruptive attacks (e.g., DDoS attacks on public websites, manipulating water systems without causing deaths and substantial injury) will not count (e.g., NYU, CNN). Ransomware attacks for the purposes of larceny and/or extortion alone will not count (e.g., Insurica).

Confused? Check our FAQ or ask us for help. To learn more about Good Judgment and Superforecasting, click here.

To learn more about how you can become a Superforecaster, see here. For other posts from our Insights blog, click here.

The question closed "No" with a closing date of 1 January 2026.

See our FAQ to learn about how we resolve questions and how scores are calculated.