Stuxnet / Operation Olympic Games (2005–2012)
Documented · occurred Handling What these labels mean →A joint US–Israeli cyber-sabotage operation (NSA with IDF Unit 8200) begun under Bush and accelerated under Obama. It targeted Siemens PLCs running Iran's P-1 centrifuges at Natanz: it made them spin erratically while replaying normal telemetry, and about 1,000 centrifuges were destroyed. An early version was introduced in 2007 via water pumps installed by Dutch engineer Erik van Sabben, recruited by the AIVD at US request; he died in a motorcycle crash in Dubai on 16 Jan 2009 (Volkskrant, 2024). A 2010 coding error spread the worm worldwide; Belarusian firm VirusBlokAda found it in June/July 2010. David Sanger exposed Olympic Games in 2012. Gen. James Cartwright pleaded guilty to lying to the FBI about leaking it and was pardoned by Obama (Jan 2017). Kaspersky (2015) linked its zero-days to the 'Equation Group' (NSA TAO); the Shadow Brokers dumped Equation tools (2016–17). The US has never officially acknowledged Stuxnet.
Ties
| To | Role | Years | Verdict | Source |
|---|---|---|---|---|
| Crypto AG - Operation Rubicon (1970-2018) | pattern: signals and cyber operations via a compromised supply chain (Siemens PLC testing at INL) | 1970–2010 | Concept | |
| Kiriakou on Epstein and Iran-Contra (Julian Dorey 2026) | pattern: Israeli covert action against a regional nuclear threat (Bull, Natanz) | 1990/2007 | Concept | |
| Suppression pattern | case: never acknowledged; the leak was prosecuted, then the leaker pardoned | 2010–2017 | Documented · occurred Handling | justsecurity.org |
| NSA mass surveillance (2013) | NSA TAO/Equation Group; Snowden-era disclosures | 2013–2017 | Documented · occurred | |
| WikiLeaks (2010-2024) | contrast: Cartwright pardoned vs. Manning/Assange prosecuted | 2017 | Concept |
Tied from
| From | Role | Years | Verdict | Source |
|---|---|---|---|---|
| Leak prosecutions compared | Cartwright: plea, then pardon | 2016–2017 | Documented · occurred |
Links
- Video: WarFronts, Stuxnet (2024)
- Wikipedia: Operation Olympic Games
- Wikipedia: Erik van Sabben
- NL Times: Dutch man sabotaged Iranian program without the government's knowledge (2024)
- Just Security: why the Cartwright pardon matters
- CyberScoop: Cartwright pardoned
Documented
| Item | Record | Tag |
|---|---|---|
| US–Israeli operation 'Olympic Games' | Sanger (NYT, 2012) from officials; the Cartwright prosecution confirms classified status | operation |
| Van Sabben (AIVD recruit) introduced an early version via water pumps (2007); died 16 Jan 2009 | Volkskrant 2-year investigation (19 AIVD/MIVD sources), Jan 2024 | van Sabben |
| Dutch government not informed by the AIVD | Volkskrant | kept from government |
| ~1,000 centrifuges destroyed; 4 zero-days; fake telemetry replay | Symantec/ISIS analyses; IAEA centrifuge counts | effects |
| Escaped via a 2010 coding error; found by VirusBlokAda | Symantec; Sanger | escape |
| Cartwright: guilty plea for false statements (Oct 2016); pardoned 17 Jan 2017 | DOJ; White House | pardon |
| Equation Group ↔ Stuxnet zero-days; NSA codewords in the code | Kaspersky (2015); Shadow Brokers dump | Equation link |
Alleged / uncertain
| Item | Source | Tag |
|---|---|---|
| Van Sabben's death was not an accident | Speculation; no evidence of foul play | van Sabben death |
| Siemens knowingly aided targeting (INL 2008 vulnerability testing) | Siemens–INL work was a public security program; knowing complicity unproven | Siemens role |
| Cost ~$1B; Iran's timeline set back ~3 years | Estimates | estimates |
How it was handled
| Method | What happened | Tag |
|---|---|---|
| NEVER ACKNOWLEDGED | No official US confirmation to date | unacknowledged |
| SELECTIVE PROSECUTION | A leak probe convicted a 4-star general, then pardoned him; lower-level leakers got prison | selective prosecution |