For the purposes of this question, "an act of cyberwar" is a cyber act (i.e., an unauthorized, malicious, and destructive act completed against a computer system through the use of a computer system) that compromises and disrupts a critical infrastructure system with destructive effects, and "state actor" means an organ of a nation state or a state-directed or state-sponsored individual or group (United Nations Office on Drugs and Crime). "US" means the executive branch of the federal government. "Critical infrastructure" is as defined in the United States Code at 18 USC 2339D(c)(3) (Cornell). Critical infrastructure does not necessarily have to be within the territory of the US to count, and both the act and accusation must occur during the question's open period to count. That an accused actor is a state actor must be stated in the accusation to count. Accusations of superficially disruptive attacks (e.g., DDoS attacks on public websites) would not count (e.g., CNN).

Confused? Check our FAQ or ask us for help. To learn more about Good Judgment and Superforecasting, click here.

To learn more about how you can become a Superforecaster, see here. For other posts from our Insights blog, click here.

NOTE 22 May 2024: While there have been reports of cyber acts recently executed by state actors against water infrastructure systems in the US, these attacks have not had "destructive effects" and/or have not risen above the threshold of "superficially disruptive attacks."

NOTE 4 September 2024: Ransomware attacks for the purposes of larceny and/or extortion alone, in and of themselves, do not rise to the level of an event that "compromises and disrupts a critical infrastructure system with destructive effects."